gr-geo-cite
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/llms-txt-gen.pyscript fetches content from the author's own GitHub repository using the GitHub API (api.github.com). This is a standard operation for a build/automation script. - [COMMAND_EXECUTION]: The skill documentation lists execution commands for local Python scripts (
scripts/weekly-cite-check.py,scripts/llms-txt-gen.py,scripts/add-citable-stats.py). These scripts perform the stated primary functions of the skill: checking AI citations and generating metadata. - [EXTERNAL_DOWNLOADS]: The
scripts/weekly-cite-check.pyscript makes outbound HTTP requests to official AI service providers (Anthropic, OpenAI, Perplexity, Google, DeepSeek) to retrieve model responses. These are legitimate operations to well-known services required for the skill's citation tracking functionality. - [CREDENTIALS_UNSAFE]: The scripts require several API keys (
ANTHROPIC_API_KEY,OPENAI_API_KEY, etc.) and aGITHUB_TOKEN. The skill correctly instructs users to provide these via environment variables rather than hardcoding them, following security best practices.
Audit Metadata