知网论文下载

• Outcome: Pass
• Latest audit: Jun 23, 2026 · 2:32 PM UTC
• Version: 1.0.5

Overview

This is a coherent CNKI paper-search and PDF-download automation skill, but it stores local login state and configuration for convenience.

Install only if you are comfortable letting an automated Edge session access CNKI with your institution or personal login. Review or delete scripts/user_config.json and scripts/browser_data if you do not want the saved URL or login state retained, and avoid setting CNKI_USER_DATA_DIR to a shared browser profile unless you intentionally want that session reused.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (7)

Context-Inappropriate Capability

Medium

• Confidence: 90% confidence
• Finding: The code allows the browser profile directory to be overridden via the CNKI_USER_DATA_DIR environment variable, which can point to an external or shared profile containing persisted cookies and login state. In this skill, that expands access beyond the explicit runtime config and can cause the automation to reuse credentials from another project, user, or prior session without clear user consent or isolation.

Vague Triggers

Medium

• Confidence: 79% confidence
• Finding: The trigger phrase "知网下载" / "cnki 下载" / "帮我下几篇知网文献" is broad enough to be invoked during ordinary discussion about CNKI downloads, which can cause the skill to activate unexpectedly. Because this skill performs browser automation, login-state reuse, and document downloading, accidental activation can lead to unintended actions and privacy-sensitive automation rather than a harmless chat response.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The README states that a user-provided CNKI entry URL is saved to `scripts/user_config.json`, but does not clearly warn the user that this value will be persisted. Since institution-specific CNKI URLs may encode organization access paths or other sensitive internal routing details, silent persistence increases the risk of retaining sensitive data without informed consent.

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger phrases include broad natural-language requests such as '帮我下几篇知网文献' and '从知网搜点论文', which can cause accidental invocation during ordinary conversation. Because this skill launches browser automation, opens a new terminal, persists login state, and can download files, unintended activation has meaningful side effects beyond a harmless reply.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill instructs persistent storage of browser login state and cookies in `browser_data/` for reuse, but the user-facing description does not clearly warn that authentication artifacts will be retained locally and remain usable for several hours. If another local user, process, or backup/sync mechanism accesses that directory, the CNKI session could be reused without the user's awareness.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"demo": "node search_cnki.js"
  },
  "dependencies": {
    "playwright": "^1.45.0"
  },
  "engines": {
    "node": ">=18.0.0"

• Confidence: 89% confidence
• Finding: "playwright": "^1.45.0"

Known Vulnerable Dependency: playwright==1.45.0 — 1 advisory(ies): CVE-2025-59288 (Playwright downloads and installs browsers without verifying the authenticity of)

High

• Category: Supply Chain
• Confidence: 97% confidence
• Finding: playwright==1.45.0

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.