patent-download

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill's credential management utility (scripts/platforms/_creds.py) uses subprocess.run to execute git commands. This functionality is part of a security feature that verifies whether local configuration files containing user credentials have been accidentally tracked by the version control system.
  • [REMOTE_CODE_EXECUTION]: The scripts/cli.py module uses __import__ to dynamically load platform-specific logic. This loading is restricted to internal modules defined in a hardcoded configuration map, ensuring that only trusted, local skill components are executed.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with established and reputable patent databases, such as Google Patents and the official systems of the National Intellectual Property Administration (CNIPA), to retrieve patent information and PDF documents.
  • [SAFE]: The skill adheres to security best practices for handling secrets by utilizing environment variables and .env files for account management, supplemented by a dedicated leak-detection utility to protect user privacy.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 02:15 PM
Security Audit — agent-trust-hub — patent-download