labarchive-integration
Warn
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install a core dependency,
labarchives-py, from a personal GitHub repository (https://github.com/mcmero/labarchives-py). This repository is not affiliated with the official LabArchives organization or a recognized trusted vendor, representing an unverifiable third-party source. - [REMOTE_CODE_EXECUTION]: Several scripts included in the skill, such as
entry_operations.py,notebook_operations.py, andsetup_config.py, rely on thelabarchivespylibrary for execution. Installing this library viapip install git+https://github.com/mcmero/labarchives-pyleads to the execution of code from an untrusted external source.
Audit Metadata