pubmed-database

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts exclusively with official NCBI and PMC BioC API endpoints at ncbi.nlm.nih.gov, which are well-known and trusted scientific resources.
  • [SAFE]: Sensitive credentials like NCBI_API_KEY are managed via the .env file or the credentials skill, adhering to secure development practices.
  • [SAFE]: The use of a dedicated Python script (pubmed_api.py) with controlled dependency management through uv prevents arbitrary command execution and ensures predictable behavior.
  • [SAFE]: Instructions explicitly forbid using dangerous tools like curl or wget for API queries, enforcing the use of the rate-limited wrapper script.
  • [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation patterns were detected in the provided skill code or instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:48 PM