reference-audit-guide

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires standard academic and utility Python packages including bibtexparser, requests, semanticscholar, and arxiv to function as intended.
  • [DATA_EXFILTRATION]: The scripts perform network operations to retrieve citation metadata from well-known scholarly services such as CrossRef (api.crossref.org), arXiv (export.arxiv.org), and Semantic Scholar (api.semanticscholar.org). These requests are limited to public academic records and do not involve sensitive user data.
  • [COMMAND_EXECUTION]: The skill documentation provides instructions for running local Python scripts to perform batch checks on BibTeX and LaTeX files. These scripts handle file reading and report generation using standard library functions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided .bib and .tex files. While these files represent an external data ingestion surface, the scripts parse them into structured data for comparison against API results rather than executing instructions contained within them. The scripts use explicit file-handling safety, such as using the 'x' mode for file writing to prevent accidental overwriting of existing local files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 08:54 AM