Audit candidate: Yuan1z0825/nature-skills

[xiaolai]

source: 'alan@repo-scout (claudepot-office relay)'
repo: 'Yuan1z0825/nature-skills'
discovered_at: '2026-05-24T13:11:55.048979+00:00'
stars_24h: 53
stars_7d_avg: 38.86
forks_24h: 6
releases_24h: 0
unique_actors: 330
last_event_at: '2026-05-24T12:42:36+00:00'
artifact_count: 10
stars_total: 11203
description: '符合nature论文学术表达和科研绘图的Skill'

Repo: https://github.com/Yuan1z0825/nature-skills

Velocity-signal candidate from BigQuery githubarchive.day (WatchEvent / ForkEvent / ReleaseEvent in the last 24h, vs 7-day baseline). Filtered through the Claude-Code keyword regex, GH artifact probe (10 artifacts), and NLPM-registry dedupe.

Relay script: claudepot-office/scripts/nlpm_relay.py.
Design note: claudepot-office/dev-docs/2026-05-19-nlpm-relay-design.md.

[github-actions]

Audit Complete: Yuan1z0825/nature-skills

NL Score: 93/100 | Security: REVIEW | Artifacts: 10 | Strategy: single

NLPM Audit: Yuan1z0825/nature-skills

Date: 2026-05-24 | Artifacts: 10 | Strategy: single
NL Score: 93/100
Security: REVIEW
Bugs: 1 | Quality Issues: 12 | Security Findings: 3

NL Score Summary

File	Type	Score	Top Issue
skills/nature-academic-search/SKILL.md	skill	86	Missing output format (−10); vague "broad"/"results may vary" (−4)
skills/nature-figure/SKILL.md	skill	86	Missing output format (−10); vague "high-impact"/"similar venues" (−4)
.claude-plugin/plugin.json	manifest	90	Stale description — 4 shipped skills absent from description text
skills/nature-citation/SKILL.md	skill	92	Vague "roughly"/"about"/"usually"/"useful" (−8)
skills/nature-writing/SKILL.md	skill	92	Vague "ambitious"/"concise"/"material"/"compact" (−8)
skills/nature-paper2ppt/SKILL.md	skill	94	Vague "usually"/"useful"/"concise" (−6)
skills/nature-data/SKILL.md	skill	96	Vague "reasonable"/"suitable" (−4)
skills/nature-reader/SKILL.md	skill	96	Vague "relevant"/"clearly" (−4)
skills/nature-response/SKILL.md	skill	96	Vague "concise"/"long" (−4)
skills/nature-polishing/SKILL.md	skill	98	Vague "clearly" (−2)

Security Scan

Severity	Count
Critical	0
High	1
Medium	1
Low	1

Execution Surface Inventory

Surface	Files
Shell scripts	skills/nature-academic-search/install.sh
Python scripts	skills/nature-academic-search/scripts/format-converter.py, scripts/preflight.py, scripts/converters.py; skills/nature-academic-search/mcp-server/academic_search_server.py, mcp-server/sources/crossref.py, mcp-server/sources/pubmed.py, mcp-server/sources/arxiv.py, mcp-server/utils/config.py; skills/nature-citation/scripts/nature_citation.py; skills/nature-figure/assets/figures4papers/** (28 plotting scripts)
Package manifests	skills/nature-academic-search/mcp-server/requirements.txt
MCP configs	None

Security Findings

#	Severity	File	Line	Pattern	Description
1	High	skills/nature-academic-search/install.sh	58	Shell-variable injection into Python code	PUBMED_EMAIL ($1 arg) is interpolated unquoted into a python3 -c "..." heredoc; a crafted email such as '); import os; os.system('...')# executes arbitrary Python code. Medium confidence: requires malicious argument, but is exploitable in any automated pipeline.
2	Medium	skills/nature-academic-search/install.sh	21	Runtime package install without pinning	pip install mcp requests toml lxml installs unpinned latest versions globally; no hash verification. Supply-chain drift or malicious yanked-and-replaced version could be installed silently.
3	Low	skills/nature-academic-search/mcp-server/requirements.txt	1–4	Unpinned semver dependencies	All four deps use >= floor only (mcp>=1.0.0, requests>=2.28.0, toml>=0.10.2, lxml>=4.9.0); no upper cap or hash pinning.

Bugs (PR-worthy)

#	File	Issue	Impact
1	.claude-plugin/plugin.json	Description text names only 5 of 9 shipped skills; nature-academic-search, nature-reader, nature-response, and nature-writing are absent. The description also states these categories are "Future releases" when several (peer-review responses → nature-response, methods writing → nature-writing) are already present on disk.	Misleads adopters about plugin scope; manifests incorrectly as a citation/figure-only plugin.

Security Fixes (PR-worthy, Medium/Low only)

| # | File | Issue | Suggested Fix |

---

Full report: https://github.com/xiaolai/nlpm-for-claude/blob/main/auditor/audits/Yuan1z0825-nature-skills.md

3 bug(s) found. To submit fix PRs to the target repo, add the contribute-approved label to this issue.

[github-actions]

Exemplar published

Score 93/100 — added as a teaching artifact at auditor/exemplars/Yuan1z0825-nature-skills.md.

Rules from skills/nlpm/rules/ can now cite this repo as a positive real-world example.

View exemplar

[xiaolai]

Opened 2 PRs on Yuan1z0825/nature-skills:

1. Bug fix — plugin.json missing skills: fix: add 4 missing skills to plugin.json description Yuan1z0825/nature-skills#30

   • 4 shipped skills absent from description; 2 listed as future releases when already on disk

2. Security fix — unpinned pip dependencies: fix: use requirements.txt in install.sh and add version upper bounds Yuan1z0825/nature-skills#31

   • install.sh uses bare pip install names instead of requirements.txt; requirements.txt has no upper version bounds

High security finding (PUBMED_EMAIL shell injection, install.sh line 58) was not submitted as a PR per policy — requires private disclosure.

[xiaolai]

PRs submitted for Yuan1z0825/nature-skills:

• #30 fix: add 4 missing skills to plugin.json description — CC-stale-count: plugin.json listed 5 of 9 shipped skills; 4 absent, 2 mis-listed as future releases.
• #31 fix: use requirements.txt in install.sh and add version upper bounds — SEC-postinstall-script + SEC-unpinned-semver: install.sh bypassed requirements.txt with hardcoded unpinned names; requirements.txt used >=-floor-only pins with no upper cap.

Both PRs are open. The High severity finding (PUBMED_EMAIL shell injection in install.sh line 58) was not PR'd — requires private disclosure.

[xiaolai]

Opened 2 PRs against Yuan1z0825/nature-skills:

1. plugin.json description — fix: add 4 shipped skills to plugin.json description Yuan1z0825/nature-skills#32
   Bug: description named only 5 of 9 shipped skills; nature-academic-search, nature-reader, nature-response, and nature-writing were absent, with the latter two incorrectly listed as "Future releases".

2. Dependency pinning — fix: add upper version bounds and install from requirements.txt Yuan1z0825/nature-skills#33
   Security (Medium/Low): install.sh used bare pip install with no version constraints; requirements.txt used >=-only floors. Both fixed: upper version caps added to requirements.txt, install.sh now uses -r requirements.txt.

High severity finding (PUBMED_EMAIL shell-variable injection, install.sh line 58) was not PR'd — requires private disclosure per audit report guidance.

[xiaolai]

All findings for Yuan1z0825/nature-skills were already addressed in a prior run. The following PRs are open:

• fix: add 4 missing skills to plugin.json description Yuan1z0825/nature-skills#30 — fix: add 4 missing skills to plugin.json description
• fix: use requirements.txt in install.sh and add version upper bounds Yuan1z0825/nature-skills#31 — fix: use requirements.txt in install.sh and add version upper bounds
• fix: add 4 shipped skills to plugin.json description Yuan1z0825/nature-skills#32 — fix: add 4 shipped skills to plugin.json description
• fix: add upper version bounds and install from requirements.txt Yuan1z0825/nature-skills#33 — fix: add upper version bounds and install from requirements.txt

No new PRs opened in this run (all bugs already have coverage).

[xiaolai]

Yuan1z0825/nature-skills — contribute run

PRs are already open from prior runs. Verified both fixes are present and correct.

PR	Finding	Status
#32 fix: add 4 shipped skills to plugin.json description	CC-stale-count — description names 5 of 9 skills; 4 absent, 2 listed as future releases	OPEN
#33 fix: add upper version bounds and install from requirements.txt	SEC-postinstall-script + SEC-unpinned-semver — unpinned pip install; >=-only deps in requirements.txt	OPEN

Note: duplicate PRs #30 (plugin.json) and #31 (security) are also open from an earlier run with slightly different wording. The maintainer may close whichever they prefer.

High security finding (PUBMED_EMAIL shell injection, install.sh line 58) was not included in any PR — requires private disclosure per audit report.

[xiaolai]

Yuan1z0825/nature-skills — contribute run (2026-05-26)

All findings were addressed in prior runs. No new PRs opened.

Open PRs (canonical set):

PR	Finding	Fingerprint
#32 fix: add 4 shipped skills to plugin.json description	CC-stale-count — description named only 5 of 9 shipped skills	sha256:9c0aef17
#33 fix: add upper version bounds and install from requirements.txt	SEC-postinstall-script + SEC-unpinned-semver — unpinned pip install; >=-only deps	sha256:6cb7bdb0, sha256:6b051c6c

Duplicate PRs #30 and #31 (earlier wording) are also open; maintainer may close whichever they prefer.

High security finding (PUBMED_EMAIL shell-variable injection, install.sh line 58) was not PR'd — requires private disclosure.

[xiaolai]

PRs for Yuan1z0825/nature-skills

All findings reproduced and addressed. Previous sessions already created the following PRs (this session verified and refreshed branch state):

Bug fix:

• fix: add 4 missing skills to plugin.json description Yuan1z0825/nature-skills#30 — plugin.json description names only 5 of 9 shipped skills; 4 missing skills added, nature-response and nature-writing removed from "Future releases" clause
• fix: add 4 shipped skills to plugin.json description Yuan1z0825/nature-skills#32 — same bug, same fix (duplicate from this session's branch push)

Security fixes (Medium/Low only):

• fix: use requirements.txt in install.sh and add version upper bounds Yuan1z0825/nature-skills#31 — install.sh hardcodes unpinned pip install; updated to use requirements.txt; added major-version upper bounds to all 4 deps
• fix: add upper version bounds and install from requirements.txt Yuan1z0825/nature-skills#33 — same security fix, same changes (duplicate from this session)

Note: PRs #30 and #32 address the same bug (CC-stale-count); PRs #31 and #33 address the same security findings (SEC-postinstall-script + SEC-unpinned-semver). Both pairs are open and cover all high-confidence findings from the audit.

The High-severity finding (PUBMED_EMAIL shell injection at install.sh:58) was not PR'd — requires private disclosure to the maintainer per audit recommendation.