← Back to scan
File as GitHub Issue repo: K-Dense-AI/scientific-agent-skills

Push this scan report to K-Dense-AI/scientific-agent-skills

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

requests.* without timeout argument

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
MED NET001 requests.* without timeout argument scientific-skills/research-grants/scrip…:189
MED NET001 requests.* without timeout argument scientific-skills/markitdown/scripts/ge…:189
MED NET001 requests.* without timeout argument scientific-skills/citation-management/s…:189
MED NET001 requests.* without timeout argument scientific-skills/hypothesis-generation…:189
MED NET001 requests.* without timeout argument scientific-skills/pptx-posters/scripts/…:189
MED NET001 requests.* without timeout argument scientific-skills/scientific-schematics…:189
MED NET001 requests.* without timeout argument scientific-skills/clinical-reports/scri…:189
MED NET001 requests.* without timeout argument scientific-skills/latex-posters/scripts…:189
MED NET001 requests.* without timeout argument scientific-skills/generate-image/script…:144
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:148
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:141
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:132
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:120
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:103
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:93
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:74
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:64
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:38
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:29
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:101
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:92
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:82
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:76
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:64
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:50
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:35
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:23
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:159
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:125
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:116
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:108
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:101
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:90
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:70
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:52
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:37
MED NET001 requests.* without timeout argument scientific-skills/open-notebook/scripts…:24
MED NET001 requests.* without timeout argument scientific-skills/peer-review/scripts/g…:189
MED NET001 requests.* without timeout argument scientific-skills/clinical-decision-sup…:189
MED NET001 requests.* without timeout argument scientific-skills/labarchive-integratio…:172
MED NET001 requests.* without timeout argument scientific-skills/research-lookup/scrip…:251
MED NET001 requests.* without timeout argument scientific-skills/research-lookup/scrip…:189
MED NET001 requests.* without timeout argument scientific-skills/research-lookup/resea…:251
MED NET001 requests.* without timeout argument scientific-skills/treatment-plans/scrip…:189
MED NET001 requests.* without timeout argument scientific-skills/infographics/scripts/…:579
MED NET001 requests.* without timeout argument scientific-skills/infographics/scripts/…:506
MED NET001 requests.* without timeout argument scientific-skills/infographics/scripts/…:424
MED NET001 requests.* without timeout argument scientific-skills/literature-review/scr…:189
MED NET001 requests.* without timeout argument scientific-skills/scientific-critical-t…:189
MED NET001 requests.* without timeout argument scientific-skills/scientific-writing/sc…:144
MED NET001 requests.* without timeout argument scientific-skills/scientific-writing/sc…:189
MED NET001 requests.* without timeout argument scientific-skills/scholar-evaluation/sc…:189
MED NET001 requests.* without timeout argument scientific-skills/venue-templates/scrip…:189
MED NET001 requests.* without timeout argument scientific-skills/scientific-slides/scr…:204
MED NET001 requests.* without timeout argument scientific-skills/scientific-slides/scr…:189
MED QUAL008 input() call in production code scientific-skills/clinical-reports/scri…:107
MED QUAL008 input() call in production code scientific-skills/clinical-reports/scri…:100
MED QUAL008 input() call in production code scientific-skills/clinical-reports/scri…:88
MED QUAL008 input() call in production code scientific-skills/matplotlib/scripts/st…:329
MED QUAL008 input() call in production code scientific-skills/matplotlib/scripts/st…:324
MED QUAL008 input() call in production code scientific-skills/matplotlib/scripts/st…:321
MED QUAL008 input() call in production code scientific-skills/matplotlib/scripts/st…:317
MED QUAL008 input() call in production code scientific-skills/matplotlib/scripts/st…:311
MED QUAL008 input() call in production code scientific-skills/matplotlib/scripts/st…:307
MED QUAL008 input() call in production code scientific-skills/matplotlib/scripts/st…:306
MED QUAL008 input() call in production code scientific-skills/matplotlib/scripts/st…:303
MED QUAL008 input() call in production code scientific-skills/matplotlib/scripts/st…:285
MED QUAL008 input() call in production code scientific-skills/labarchive-integratio…:170
MED QUAL008 input() call in production code scientific-skills/labarchive-integratio…:108
MED QUAL008 input() call in production code scientific-skills/labarchive-integratio…:60
MED QUAL008 input() call in production code scientific-skills/labarchive-integratio…:56
MED QUAL008 input() call in production code scientific-skills/labarchive-integratio…:52
MED QUAL008 input() call in production code scientific-skills/labarchive-integratio…:51
MED QUAL008 input() call in production code scientific-skills/labarchive-integratio…:33
MED QUAL008 input() call in production code scientific-skills/labarchive-integratio…:22
MED QUAL008 input() call in production code scientific-skills/treatment-plans/scrip…:228
MED QUAL008 input() call in production code scientific-skills/treatment-plans/scrip…:78
MED QUAL008 input() call in production code scientific-skills/scholar-evaluation/sc…:299
MED QUAL008 input() call in production code scientific-skills/scholar-evaluation/sc…:297
MED QUAL008 input() call in production code scientific-skills/scholar-evaluation/sc…:267
MED QUAL008 input() call in production code scientific-skills/venue-templates/scrip…:133
MED QUAL008 input() call in production code scientific-skills/venue-templates/scrip…:129
MED QUAL008 input() call in production code scientific-skills/venue-templates/scrip…:128
MED QUAL008 input() call in production code scientific-skills/venue-templates/scrip…:127
MED QUAL008 input() call in production code scientific-skills/venue-templates/scrip…:126
MED QUAL008 input() call in production code scientific-skills/venue-templates/scrip…:114
MED QUAL003 Magic number used as default arg scientific-skills/research-grants/scrip…:754
MED QUAL003 Magic number used as default arg scientific-skills/research-grants/scrip…:52
MED QUAL003 Magic number used as default arg scientific-skills/markitdown/scripts/ge…:52
MED QUAL003 Magic number used as default arg scientific-skills/markitdown/scripts/ge…:754
MED QUAL003 Magic number used as default arg scientific-skills/citation-management/s…:52
MED QUAL003 Magic number used as default arg scientific-skills/citation-management/s…:754
MED QUAL003 Magic number used as default arg scientific-skills/hypothesis-generation…:52
MED QUAL003 Magic number used as default arg scientific-skills/hypothesis-generation…:754
MED QUAL003 Magic number used as default arg scientific-skills/pptx-posters/scripts/…:754
MED QUAL003 Magic number used as default arg scientific-skills/pptx-posters/scripts/…:52
MED QUAL003 Magic number used as default arg scientific-skills/scientific-schematics…:754
MED QUAL003 Magic number used as default arg scientific-skills/scientific-schematics…:52
MED QUAL003 Magic number used as default arg scientific-skills/clinical-reports/scri…:754
MED QUAL003 Magic number used as default arg scientific-skills/clinical-reports/scri…:52
MED QUAL003 Magic number used as default arg scientific-skills/latex-posters/scripts…:52
MED QUAL003 Magic number used as default arg scientific-skills/latex-posters/scripts…:754
MED QUAL003 Magic number used as default arg scientific-skills/peer-review/scripts/g…:52
MED QUAL003 Magic number used as default arg scientific-skills/peer-review/scripts/g…:754
MED QUAL003 Magic number used as default arg scientific-skills/clinical-decision-sup…:754
MED QUAL003 Magic number used as default arg scientific-skills/clinical-decision-sup…:52
MED QUAL003 Magic number used as default arg scientific-skills/matplotlib/scripts/st…:324
MED QUAL003 Magic number used as default arg scientific-skills/matplotlib/scripts/st…:317
MED QUAL003 Magic number used as default arg scientific-skills/matplotlib/scripts/st…:311
MED QUAL003 Magic number used as default arg scientific-skills/matplotlib/scripts/st…:307
MED QUAL003 Magic number used as default arg scientific-skills/matplotlib/scripts/st…:306
MED QUAL003 Magic number used as default arg scientific-skills/research-lookup/scrip…:52
MED QUAL003 Magic number used as default arg scientific-skills/research-lookup/scrip…:754
MED QUAL003 Magic number used as default arg scientific-skills/treatment-plans/scrip…:754
MED QUAL003 Magic number used as default arg scientific-skills/treatment-plans/scrip…:52
MED QUAL003 Magic number used as default arg scientific-skills/infographics/scripts/…:87
MED QUAL003 Magic number used as default arg scientific-skills/infographics/scripts/…:1203
MED QUAL003 Magic number used as default arg scientific-skills/literature-review/scr…:52
MED QUAL003 Magic number used as default arg scientific-skills/literature-review/scr…:754
MED QUAL003 Magic number used as default arg scientific-skills/scientific-visualizat…:42
MED QUAL003 Magic number used as default arg scientific-skills/scientific-visualizat…:36
MED QUAL003 Magic number used as default arg scientific-skills/scientific-critical-t…:52
MED QUAL003 Magic number used as default arg scientific-skills/scientific-critical-t…:754
MED QUAL003 Magic number used as default arg scientific-skills/scientific-writing/sc…:52
MED QUAL003 Magic number used as default arg scientific-skills/scientific-writing/sc…:754
MED QUAL003 Magic number used as default arg scientific-skills/scholar-evaluation/sc…:52
MED QUAL003 Magic number used as default arg scientific-skills/scholar-evaluation/sc…:754
MED QUAL003 Magic number used as default arg scientific-skills/venue-templates/scrip…:52
MED QUAL003 Magic number used as default arg scientific-skills/venue-templates/scrip…:754
MED QUAL003 Magic number used as default arg scientific-skills/scientific-slides/scr…:754
MED QUAL003 Magic number used as default arg scientific-skills/scientific-slides/scr…:52
MED QUAL002 Python mutable default argument scientific-skills/scientific-visualizat…:14
MED TEST002 Function is stub-only (pass/raise NotImplementedError) scientific-skills/docx/scripts/office/v…:109
MED TEST002 Function is stub-only (pass/raise NotImplementedError) scientific-skills/pptx/scripts/office/v…:109
MED TEST002 Function is stub-only (pass/raise NotImplementedError) scientific-skills/xlsx/scripts/office/v…:109
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/docx/scripts/office/v…:659
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/docx/scripts/office/v…:632
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/docx/scripts/office/v…:624
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/pptx/scripts/office/v…:659
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/pptx/scripts/office/v…:632
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/pptx/scripts/office/v…:624
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/xlsx/scripts/office/v…:659
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/xlsx/scripts/office/v…:632
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/xlsx/scripts/office/v…:624
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/pymc/assets/hierarchi…:303
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/pymc/assets/hierarchi…:273
MED MEM001 C++ new without matching delete (memory leak) scientific-skills/timesfm-forecasting/e…:257
MED LOG001 PII printed to stdout/stderr scientific-skills/research-grants/scrip…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/research-grants/scrip…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/markitdown/scripts/ge…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/markitdown/scripts/ge…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/citation-management/s…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/citation-management/s…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/hypothesis-generation…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/hypothesis-generation…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/pptx-posters/scripts/…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/pptx-posters/scripts/…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-schematics…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-schematics…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/clinical-reports/scri…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/clinical-reports/scri…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/latex-posters/scripts…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/latex-posters/scripts…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/open-notebook/scripts…:96
MED LOG001 PII printed to stdout/stderr scientific-skills/peer-review/scripts/g…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/peer-review/scripts/g…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/clinical-decision-sup…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/clinical-decision-sup…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/research-lookup/scrip…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/research-lookup/scrip…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/research-lookup/looku…:155
MED LOG001 PII printed to stdout/stderr scientific-skills/treatment-plans/scrip…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/treatment-plans/scrip…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/infographics/scripts/…:182
MED LOG001 PII printed to stdout/stderr scientific-skills/infographics/scripts/…:1240
MED LOG001 PII printed to stdout/stderr scientific-skills/literature-review/scr…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/literature-review/scr…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-critical-t…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-critical-t…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-writing/sc…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-writing/sc…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/scholar-evaluation/sc…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/scholar-evaluation/sc…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/venue-templates/scrip…:99
MED LOG001 PII printed to stdout/stderr scientific-skills/venue-templates/scrip…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-slides/scr…:96
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-slides/scr…:704
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-slides/scr…:784
MED LOG001 PII printed to stdout/stderr scientific-skills/scientific-slides/scr…:99
MED CONC002 Concurrency — TOCTOU race via os.path.exists+open scientific-skills/phylogenetics/scripts…:108
MED SUPC002 Supply chain — npm install without lockfile scientific-skills/phylogenetics/scripts…:8
MED SUPC002 Supply chain — npm install without lockfile scientific-skills/open-notebook/scripts…:8
MED SUPC002 Supply chain — npm install without lockfile scientific-skills/open-notebook/scripts…:8
MED SUPC002 Supply chain — npm install without lockfile scientific-skills/open-notebook/scripts…:8
MED SUPC002 Supply chain — npm install without lockfile scientific-skills/timesfm-forecasting/e…:411
MED SUPC002 Supply chain — npm install without lockfile scientific-skills/scientific-slides/scr…:133
MED CRYP001 Crypto — plaintext HTTP for sensitive endpoint scientific-skills/docx/scripts/office/v…:91
MED CRYP001 Crypto — plaintext HTTP for sensitive endpoint scientific-skills/docx/scripts/office/v…:62
MED CRYP001 Crypto — plaintext HTTP for sensitive endpoint scientific-skills/docx/scripts/accept_c…:21
MED CRYP001 Crypto — plaintext HTTP for sensitive endpoint scientific-skills/pptx/scripts/office/v…:91
Reset to top 5 200 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `K-Dense-AI/scientific-agent-skills`

**Score: 70/100 (C+)**  ·  392 findings  ·  scanned 2026-05-14 23:07 UTC  ·  72,122 LOC

| Severity | Count |
|---|---|
| CRITICAL | 20 |
| HIGH | 130 |
| MEDIUM | 229 |
| LOW | 1 |

📊 [Full filterable report](https://repobility.com/scan/038a3eaa-8ac2-4f30-9ab7-6222e3dd7e70/)  ·  ![scorecard](https://repobility.com/scan/038a3eaa-8ac2-4f30-9ab7-6222e3dd7e70/report.png?v=1778800075-s2)

### Top findings

1. **MEDIUM** `NET001` — requests.* without timeout argument
   `scientific-skills/research-grants/scripts/generate_schematic_ai.py:189`
2. **MEDIUM** `NET001` — requests.* without timeout argument
   `scientific-skills/markitdown/scripts/generate_schematic_ai.py:189`
3. **MEDIUM** `NET001` — requests.* without timeout argument
   `scientific-skills/citation-management/scripts/generate_schematic_ai.py:189`
4. **MEDIUM** `NET001` — requests.* without timeout argument
   `scientific-skills/hypothesis-generation/scripts/generate_schematic_ai.py:189`
5. **MEDIUM** `NET001` — requests.* without timeout argument
   `scientific-skills/pptx-posters/scripts/generate_schematic_ai.py:189`

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/038a3eaa-8ac2-4f30-9ab7-6222e3dd7e70/_
Already filed
This repo publishes a SECURITY.md policy and the scan contains 4 Critical/High security finding(s). Public issue filing would violate coordinated disclosure. Submit privately via the project's security reporting channel.
Megaproject â high spam risk
Could not determine 'K-Dense-AI/scientific-agent-skills' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.
I read the warnings â override Cancel

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.