Modis Lst Download

• Outcome: Review
• Latest audit: Jul 24, 2026 · 7:18 PM UTC
• Version: 0.2.0

Overview

This looks like a legitimate NASA data downloader, but it under-discloses password storage and authentication behavior and overstates the promised output format.

Review this before installing if you plan to use Earthdata credentials. Prefer environment variables over the configure command, or delete the plaintext config file after use. Expect raw MODIS downloads unless you verify conversion yourself, and consider pinning reviewed dependency versions before running it in a sensitive environment.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (8)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 88% confidence
• Finding: The skill description promises GeoTIFF output and a narrow download/search behavior, but the documented behavior appears broader: it may store credentials locally, emit raw download URLs, and download HDF assets without guaranteed conversion. This mismatch can mislead users about what data is written to disk, how secrets are handled, and what artifacts are produced, which increases the risk of accidental credential exposure, unsafe downstream processing, or policy bypass in environments that only approved GeoTIFF workflows.

Intent-Code Divergence

Medium

• Confidence: 82% confidence
• Finding: The privacy notice is materially incomplete: the tool performs follow-up requests to self_link URLs and may send credentials during authenticated downloads, which exceeds the stated disclosure of only bbox, date range, and product name. Misleading privacy/security disclosures can cause users to provide credentials under false assumptions and undermine informed consent about external transmission.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The configure flow stores the Earthdata password in plaintext in a local config file without an explicit warning or stronger protection. Even with chmod 600, plaintext secret persistence increases exposure to local compromise, backups, accidental disclosure, or multi-user environment misconfiguration.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

modis_lst_download
requests>=2.28.0
tqdm>=4.64.0

• Confidence: 95% confidence
• Finding: modis_lst_download

Unpinned Dependencies

Low

• Category: Supply Chain

Content

modis_lst_download
requests>=2.28.0
tqdm>=4.64.0

• Confidence: 98% confidence
• Finding: requests>=2.28.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

modis_lst_download
requests>=2.28.0
tqdm>=4.64.0

• Confidence: 92% confidence
• Finding: tqdm>=4.64.0

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High

• Category: Supply Chain
• Confidence: 97% confidence
• Finding: requests==2.28.0

Known Vulnerable Dependency: tqdm==4.64.0 — 2 advisory(ies): CVE-2024-34062 (tqdm CLI arguments injection attack); CVE-2024-34062 (tqdm CLI arguments injection attack)

Low

• Category: Supply Chain
• Confidence: 79% confidence
• Finding: tqdm==4.64.0

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: tests/test_modis-lst-download.py:26