bear-scoop

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local shell commands using the scimaster-cli (aliased as sci). These commands (sci search, sci --version) are essential for retrieving academic papers and verifying tool availability. It also performs local file system operations to create a dedicated directory for research results.
  • [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the scimaster-cli Node.js package. It provides instructions for the user to install this package manually via npm. The CLI tool communicates with the scientific database at scimaster.bohrium.com to fetch research data, which is its primary intended function.
  • [SAFE]: The skill implements strong data integrity practices, explicitly instructing the agent never to fabricate research results from its own memory. It uses structured templates (Markdown and HTML) to process retrieved data, minimizing the risk of indirect prompt injection while maintaining clear boundaries for the agent's capabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:38 PM
Security Audit — agent-trust-hub — bear-scoop