aminer-data-search
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands (curl) and a provided Python script (scripts/aminer_client.py) to perform network requests against the AMiner API. These commands are integral to the skill's documented functionality for retrieving academic data.
- [DATA_EXFILTRATION]: The skill transmits search parameters and authentication tokens to 'datacenter.aminer.cn'. This communication is necessary for the intended academic search functionality and targets the official service provider's domain.
- [CREDENTIALS_UNSAFE]: While the skill requires an API key, it contains explicit instructions for the agent to handle the 'AMINER_API_KEY' environment variable securely, advising against exposing it in logs or output. It does not contain hardcoded secrets.
Audit Metadata