bear-scoop
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands using the
scimaster-cli(aliased assci). These commands (sci search,sci --version) are essential for retrieving academic papers and verifying tool availability. It also performs local file system operations to create a dedicated directory for research results. - [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the
scimaster-cliNode.js package. It provides instructions for the user to install this package manually vianpm. The CLI tool communicates with the scientific database atscimaster.bohrium.comto fetch research data, which is its primary intended function. - [SAFE]: The skill implements strong data integrity practices, explicitly instructing the agent never to fabricate research results from its own memory. It uses structured templates (Markdown and HTML) to process retrieved data, minimizing the risk of indirect prompt injection while maintaining clear boundaries for the agent's capabilities.
Audit Metadata