labarchive-integration

Warn

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions and scripts recommend installing a Python wrapper (labarchives-py) from a non-verified third-party GitHub repository (https://github.com/mcmero/labarchives-py). While this is a common integration pattern, the source is outside of the trusted organization lists.
  • [COMMAND_EXECUTION]: The skill provides and utilizes multiple CLI scripts (setup_config.py, notebook_operations.py, entry_operations.py) to handle configuration and API interactions. These scripts are intended to be executed by the user to perform ELN operations.
  • [SAFE]: The skill follows security best practices for credential management by providing a setup script that restricts configuration file permissions (600) and by advising users to store sensitive keys in environment variables rather than hardcoding them in scripts.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 14, 2026, 09:23 AM
Security Audit — agent-trust-hub — labarchive-integration