research
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The Python script executes the
scholarCLI and a local binary (consensus) to retrieve search results. These operations are performed using secure subprocess calls with list-based arguments, preventing shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The script performs network requests to
api.crossref.orgto resolve journal names. This targets a well-known academic metadata service and is consistent with the skill's stated purpose. - [SAFE]: The skill attempts to read a local
.bibfile and a domain knowledge markdown file from the user's home directory and sibling skill folders. These actions are used to provide personalized search results and journal filtering, with no signs of unauthorized data exfiltration.
Audit Metadata