reference-audit-guide
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires standard academic and utility Python packages including
bibtexparser,requests,semanticscholar, andarxivto function as intended. - [DATA_EXFILTRATION]: The scripts perform network operations to retrieve citation metadata from well-known scholarly services such as CrossRef (api.crossref.org), arXiv (export.arxiv.org), and Semantic Scholar (api.semanticscholar.org). These requests are limited to public academic records and do not involve sensitive user data.
- [COMMAND_EXECUTION]: The skill documentation provides instructions for running local Python scripts to perform batch checks on BibTeX and LaTeX files. These scripts handle file reading and report generation using standard library functions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided
.biband.texfiles. While these files represent an external data ingestion surface, the scripts parse them into structured data for comparison against API results rather than executing instructions contained within them. The scripts use explicit file-handling safety, such as using the 'x' mode for file writing to prevent accidental overwriting of existing local files.
Audit Metadata