aminer-free-academic
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied queries (paper titles, scholar names) to fetch data from the AMiner API. While this creates a surface for indirect prompt injection where the retrieved content could potentially influence the agent, it is restricted to the search context and is a standard characteristic of search-oriented skills.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill utilizes the
AMINER_API_KEYenvironment variable for authentication. It includes explicit instructions for the agent to avoid printing the token in plain text and provides proactive guidance to the user on secure token storage in the environment configuration. - [EXTERNAL_DOWNLOADS]: The skill performs network requests using
curlto the official AMiner API gateway (datacenter.aminer.cn). These operations are necessary for the skill's primary function and target legitimate, vendor-controlled infrastructure for academic research.
Audit Metadata