citation-verification

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill connects to academic metadata providers to verify reference accuracy. All connections are made to reputable, well-known services (api.crossref.org, api.openalex.org, and export.arxiv.org).
  • [INDIRECT_PROMPT_INJECTION]: The tool processes citation data from BibTeX files and external API responses, which constitutes an indirect injection surface.
  • Ingestion points: Processes .bib files via a custom parser in scripts/verify_citations.py and reads JSON/XML responses from the specified APIs.
  • Boundary markers: None present in the parser, but the data is used for matching and reporting rather than code execution.
  • Capability inventory: Performs file read operations on user-supplied bibliographies, network requests using urllib, and file write operations for JSON reporting.
  • Sanitization: Uses urllib.parse.quote for URL safety and re.sub to normalize input text and strip potential control characters.
  • [DATA_EXFILTRATION]: No unauthorized data exfiltration is detected. The script only transmits citation metadata (titles, authors, and DOIs) to the verification APIs as required for its stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 01:47 AM