literature-review

ISSUES FOUND max severity CRITICALSkillSpector Do not install 100 registry K-Dense-AI last scanned 1 scan

7 findings (3 critical, 2 medium, 2 low), mainly data exfiltration, unauthorized tool use. Most recent scan 2026-10-21.

Findings7
Critical3
High0
Medium2
Low2
Analyzersstatic bytecode pipeline correlation behavioral trigger
Scanner version2.3.1

Second scanner: NVIDIA SkillSpector

VerdictDo not install 100
Score100 / 100
Issues30
CategoriesPrivilege Escalation Data Exfiltration Data Flow
Version2.12.0 (static)

Independent static run, no language model, over the same files as the Cisco scan above. How the two scanners compare across the whole corpus: Two scanners, one corpus.

What this skill does

Conducts systematic, scoping, and narrative literature reviews using PubMed, arXiv, bioRxiv, Semantic Scholar, and other appropriate sources. Use for research synthesis, reproducible literature searches, screening, citation checking, or preparing Markdown and PDF reviews. Tracks search coverage, records versus studies, and evidence limitations; supports meta-analysis planning but does not supply a meta-analysis engine.

Package
12 files, 128 KB
SKILL.md
1445 words, 12+ sections
Code
Python (5)
Allowed tools
Read Write Edit Bash
License
MIT license
Compatibility
Python 3.10+ with requests; network for DOI checks and searches. Optional parallel-cli requires Parallel authentication. PDF export needs Pandoc and XeLaTeX; AI schematics need OPENROUTER_API_KEY.

SKILL.md covers: Literature Review · Overview · When to Use This Skill · Figures and PRISMA reporting · Core Workflow · Best Practices · Search Strategy · Records, Reports, and Studies · Screening and Selection · Synthesis · Quality and Reproducibility · Writing

Findings

CRITICAL Cross-file env var exfiltration: 3 files Data Exfiltrationbehavioral

Environment variable access with network calls in scripts/generate_schematic_ai.py, scripts/generate_schematic.py

Remediation: Review data flow across files: scripts/generate_schematic_ai.py, scripts/verify_citations.py, scripts/generate_schematic.py
CRITICAL Cross-file exfiltration chain: 3 files Data Exfiltrationbehavioral

Multi-file exfiltration chain detected: scripts/generate_schematic_ai.py, scripts/generate_schematic.py collect data → scripts/generate_schematic_ai.py → scripts/generate_schematic_ai.py, scripts/verify_citations.py transmit to network

Remediation: Review data flow across files: scripts/generate_schematic_ai.py, scripts/verify_citations.py, scripts/generate_schematic.py
CRITICAL Environment variable access with network calls detected Data Exfiltrationbehavioral

Script accesses environment variables and makes network calls in /home/runner/work/skill-scanner-test/skill-scanner-test/skills/K-Dense-AI-scientific-agent-skills/skills/literature-review/scripts/generate_schematic_ai.py

/home/runner/work/skill-scanner-test/skill-scanner-test/skills/K-Dense-AI-scientific-agent-skills/skills/literature-review/scripts/generate_schematic_ai.py

Remediation: Remove environment variable harvesting or network transmission
MEDIUM Code makes network requests Unauthorized Tool Usestatic

Skill code makes network requests. While not controlled by allowed-tools, network access should be documented and justified in the skill description.

SKILL.md

Remediation: Document network usage in skill description or remove network operations if not needed
MEDIUM Outbound network request primitives that can transmit data externally Data Exfiltrationstatic

Pattern detected: requests.post(

scripts/generate_schematic_ai.py:263

response = requests.post(
Remediation: Ensure network operations are necessary and document allowed destinations
LOW Code uses search/grep patterns but Grep tool not in allowed-tools Unauthorized Tool Usestatic

Skill restricts tools to ['Read', 'Write', 'Edit', 'Bash'] but code uses regex search patterns

SKILL.md

Remediation: Add 'Grep' to allowed-tools or remove regex search operations
LOW Script contacts a destination the documentation never mentions Unauthorized Tool Usestatic

Script contacts or configures 'openrouter.ai' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.

scripts/generate_schematic_ai.py:235

Remediation: Document the destination in SKILL.md (or the manifest description) if it is intended, or remove the undisclosed network access. Organizations can list internal hosts in llm_analysis.trusted_reference_domains.

What is in the package

FileKindSize
SKILL.mddoc13 KB
assets/review_template.mddoc13 KB
references/citation_styles.mddoc7.4 KB
references/core_workflow.mddoc12 KB
references/database_strategies.mddoc10 KB
references/example_workflow.mddoc3.0 KB
references/search_and_citation.mddoc4.6 KB
scripts/generate_pdf.pyscript4.9 KB
scripts/generate_schematic.pyscript7.6 KB
scripts/generate_schematic_ai.pyscript35 KB
scripts/search_databases.pyscript8.6 KB
scripts/verify_citations.pyscript9.7 KB

External hosts referenced

doi.org arxiv.org openrouter.ai www.prisma-statement.org apastyle.apa.org api.crossref.org api.semanticscholar.org export.arxiv.org pubmed.ncbi.nlm.nih.gov www.cochrane.org api.biorxiv.org help.openalex.org pandoc.org training.cochrane.org www.nature.com www.ncbi.nlm.nih.gov www.nlm.nih.gov amstar.ca api.openalex.org community.crossref.org docs.parallel.ai eutilities.github.io eutils.ncbi.nlm.nih.gov ieeeauthorcenter.ieee.org info.arxiv.org meshb.nlm.nih.gov ncbiinsights.ncbi.nlm.nih.gov scholar.google.com www.chicagomanualofstyle.org www.crd.york.ac.uk

Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.

Environment variables referenced

OPENROUTER_API_KEY PARALLEL_API_KEY

Package contents recorded 2026-10-22 at commit 593377bb0487. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.

What we checked

What we did not check

Sources

Related skills