Scanned skills

yuan1z0825/nature-skills nature-downloader

Checked the catalogued skill at nature-downloader.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 146
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 146
transparencymedium SD-007
data/publishers.json
transparencymedium SD-007
data/publishers.json
transparencymedium SD-007
data/publishers.json
transparencymedium SD-007
docs/nature-downloader-reference-research-2026-07-15.md
securityhigh SD-007
docs/nature-downloader-reference-research-2026-07-15.md
permission_hygienehigh SD-003
references/institutional-browser-workflow.md
securityhigh SD-007
references/institutional-browser-workflow.md
securityhigh SD-007
scripts/batch_download.mjs
securityhigh SD-007
scripts/batch_download.mjs
securityhigh SD-007
scripts/batch_download.mjs
4 suppressed by AI triage
securityhigh SD-022 benign_example
SKILL.md

The snippet is documentation describing URL handling, not actual DNS tunneling code.

transparencymedium SD-007 benign_example
data/school.schema.json

Standard JSON schema reference, not a malicious outbound network call.

transparencymedium SD-007 benign_example
data/schools.yaml

The matched URL appears only in a comment for runtime configuration, not as an executed outbound call.

permission_hygienehigh SD-003 benign_example
references/delivery-verification-and-failures.md

The path is a benign example used in documentation, not an active exploit