bear-review
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install an external package
scimaster-clivianpm install -g scimaster-cli. This package is a dependency for the skill's primary function of scientific literature retrieval. - [COMMAND_EXECUTION]: The skill workflow involves executing shell commands through the
sciCLI tool, specificallysci search,sci init, andsci usage. These commands are used to interact with the SciMaster platform to fetch research metadata. - [DATA_EXFILTRATION]: The skill performs network operations to fetch scientific data from
scimaster.bohrium.comvia the CLI. It does not access or exfiltrate sensitive local files or credentials; it manages API keys through the CLI's own initialization process (sci init). - [PROMPT_INJECTION]: The skill contains strong directives against hallucination (e.g., 'Iron Rules'), ensuring that the agent only uses data retrieved during the session. This is a safety measure to ensure research integrity.
Audit Metadata