Skills
Navigate
skills/jtsang4/search-paper-cli/search-paper/Gen Agent Trust Hub

search-paper

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/ensure-search-paper-cli.sh downloads the search-paper-cli binary directly from the author's GitHub repository (github.com/jtsang4/search-paper-cli) using curl or wget. This is a standard installation procedure for this skill.
  • [COMMAND_EXECUTION]: The skill executes go install or extracts downloaded archives (using tar or a Python script) to install the CLI. These operations are scoped to the skill's local directory or the user's Go binary path.
  • [CREDENTIALS_UNSAFE]: The skill documentation explicitly instructs users to manage sensitive information (like the Unpaywall email) via environment variables (SEARCH_PAPER_UNPAYWALL_EMAIL) or a local configuration file (~/.config/search-paper-cli/config.yaml), which is a recommended security practice for secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 03:08 PM
Security Audit — agent-trust-hub — search-paper