changing "injected script" to a file download.
adding "download recipe" for both wget and s3 methods.
s3 generates a temporary link for 5 seconds, downloads the file and removes itself.