alterlab-citation-graph
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to
api.openalex.orgto retrieve academic metadata. OpenAlex is a well-known, public repository of scholarly data. The communication is handled using Python's standardurlliblibrary with appropriate URL encoding and timeouts. - [COMMAND_EXECUTION]: The provided Python script
scripts/build_graph.pyis intended to be run locally. It usesargparsefor secure command-line argument handling and does not invoke subshells or execute arbitrary user-supplied strings as code. - [DATA_EXPOSURE]: The skill does not access sensitive local files or environment variables beyond the optional
OPENALEX_MAILTOfor API etiquette. It does not require or use API keys. Output is written to user-specified local paths in standard GraphML and JSON formats. - [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (academic paper titles and metadata from OpenAlex), this data is used to construct a structured graph file and is not interpolated into the agent's system prompt in a way that could influence agent behavior.
Audit Metadata