manage-refs

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates medical manuscript reference management through validation, rendering, and conversion tools.
  • [COMMAND_EXECUTION]: The render_pandoc.sh script executes the pandoc command-line utility to transform documents. This is a standard and expected behavior for document conversion tasks.
  • [SAFE]: The script inject_zotero_cwyw.py communicates with a local Zotero connector on localhost:23119. This interaction is confined to the local machine and is required to synchronize bibliographic data.
  • [EXTERNAL_DOWNLOADS]: Documentation in citation_styles/README.md describes how to fetch CSL files from zotero.org. This is an informative maintenance step for the user and does not involve runtime execution of untrusted code.
  • [SAFE]: Includes a vendored library _vendor_citation_writer.py (MIT licensed). Technical review confirms it performs legitimate document XML manipulations without hidden or suspicious functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 12:29 PM
Security Audit — agent-trust-hub — manage-refs