alterlab-yokatlas
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Python scripts via
uv runto interact with theyokatlas-pylibrary. This is the intended method for retrieving program data. - [EXTERNAL_DOWNLOADS]: The skill dynamically downloads the
yokatlas-pypackage and its requirements (includinghttpxandpydantic) from the official Python Package Index (PyPI) at runtime using theuvmanager. - [DATA_EXFILTRATION]: The skill makes legitimate network requests to the official YÖK Atlas government domain (
yokatlas.yok.gov.tr) to fetch university and program statistics. This is the primary purpose of the skill and does not involve sensitive user data.
Audit Metadata