labarchive-integration

Warn

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install a core dependency, labarchives-py, from a personal GitHub repository (https://github.com/mcmero/labarchives-py). This repository is not affiliated with the official LabArchives organization or a recognized trusted vendor, representing an unverifiable third-party source.
  • [REMOTE_CODE_EXECUTION]: Several scripts included in the skill, such as entry_operations.py, notebook_operations.py, and setup_config.py, rely on the labarchivespy library for execution. Installing this library via pip install git+https://github.com/mcmero/labarchives-py leads to the execution of code from an untrusted external source.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 6, 2026, 12:15 PM