medrxiv-search
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.valyu.aito perform semantic searches on medRxiv data. This is the primary function of the skill and uses a well-defined API endpoint. - [CREDENTIALS_UNSAFE]: The skill manages a Valyu API key by storing it in a local configuration file at
~/.valyu/config.json. This is a standard and acceptable practice for local CLI tools to manage user credentials securely without hardcoding them. - [COMMAND_EXECUTION]: The skill includes a Bash wrapper (
scripts/search) and a Node.js script (scripts/search.mjs) to handle CLI arguments and execute the search logic. These scripts do not perform any dangerous shell operations or inject untrusted input into shell commands. - [DATA_EXFILTRATION]: No evidence of data exfiltration was found. The skill only sends the search query and API key to the official Valyu API endpoint to retrieve medical research papers.
Audit Metadata