alterlab-openalex
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the
requestslibrary for HTTP communication. This is a standard, well-known package installed viauv pipfrom the official PyPI registry, representing a common and safe dependency for Python applications. - [DATA_EXFILTRATION]: Network activity is restricted to the official OpenAlex API domain (
api.openalex.org). The skill handles sensitive API keys by reading them from theOPENALEX_API_KEYenvironment variable and transmitting them via theAuthorization: Bearerheader, which is the recommended practice to prevent credential leakage in logs or URL parameters. - [SAFE]: The skill implementation in
scripts/openalex_client.pyandscripts/query_helpers.pyis clean and focused on its stated purpose. It includes robust error handling for API cost budgets (HTTP 429) and correctly implements scholarly search patterns like two-step entity resolution (Name to ID) to ensure data accuracy. No patterns of obfuscation, persistence, or privilege escalation were detected.
Audit Metadata