Nasa Power Download

• Outcome: Review
• Latest audit: Jul 24, 2026 · 7:17 PM UTC
• Version: 0.2.0

Overview

The skill mostly matches a NASA POWER downloader, but it should be reviewed because its documentation overstates regional bounding-box behavior and its dependency/install metadata is unreliable.

Review before installing. It does not show exfiltration or destructive behavior, but users should not rely on bbox outputs as regional aggregates unless the implementation is fixed, and the publisher should correct the dependency file, pin safe dependency versions, and align installation instructions with the actual artifact layout.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (7)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 83% confidence
• Finding: The skill documentation advertises commands that perform network access and write output files, yet no declared permissions are present. This creates a trust and policy gap: users or platforms may assume the skill is less capable than it actually is, increasing the chance of unexpected file creation or outbound requests during use.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 92% confidence
• Finding: The skill claims to support regional bounding-box queries, but the implementation behavior reportedly collapses the bbox to a center point and submits only a point query. This is dangerous because it can silently produce materially incorrect data while presenting it as region-level output, undermining downstream scientific, operational, or policy decisions that rely on geographic aggregation.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

nasa_power_download
requests>=2.28.0
tqdm>=4.64.0

• Confidence: 93% confidence
• Finding: nasa_power_download

Unpinned Dependencies

Low

• Category: Supply Chain

Content

nasa_power_download
requests>=2.28.0
tqdm>=4.64.0

• Confidence: 97% confidence
• Finding: requests>=2.28.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

nasa_power_download
requests>=2.28.0
tqdm>=4.64.0

• Confidence: 94% confidence
• Finding: tqdm>=4.64.0

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High

• Category: Supply Chain
• Confidence: 92% confidence
• Finding: requests==2.28.0

Known Vulnerable Dependency: tqdm==4.64.0 — 2 advisory(ies): CVE-2024-34062 (tqdm CLI arguments injection attack); CVE-2024-34062 (tqdm CLI arguments injection attack)

Low

• Category: Supply Chain
• Confidence: 72% confidence
• Finding: tqdm==4.64.0

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: tests/test_nasa-power-download.py:28