alterlab-protocolsio
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Comprehensive analysis of the skill's instructions, examples, and reference files reveals no malicious patterns or security threats. The skill is a legitimate tool for scientific research integration.
- [CREDENTIALS_UNSAFE]: The skill handles authentication by instructing users to provide access tokens via the standard Authorization header. It explicitly warns against hardcoding credentials and provides best practices for secure token storage.
- [EXTERNAL_DOWNLOADS]: Network operations are correctly scoped to the official protocols.io API domains (protocols.io). As this is the intended service and a well-known scientific platform, these connections are documented and considered safe.
- [COMMAND_EXECUTION]: Python code examples in the skill utilize the standard requests library for API communication. There is no evidence of arbitrary shell command execution, unsafe subprocess spawning, or system-level access.
- [DATA_EXFILTRATION]: No unauthorized data transfer mechanisms were detected. The skill only facilitates the transmission of protocol-related data to the authorized protocols.io service.
Audit Metadata