citation-verification
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to academic metadata providers to verify reference accuracy. All connections are made to reputable, well-known services (api.crossref.org, api.openalex.org, and export.arxiv.org).
- [INDIRECT_PROMPT_INJECTION]: The tool processes citation data from BibTeX files and external API responses, which constitutes an indirect injection surface.
- Ingestion points: Processes
.bibfiles via a custom parser inscripts/verify_citations.pyand reads JSON/XML responses from the specified APIs. - Boundary markers: None present in the parser, but the data is used for matching and reporting rather than code execution.
- Capability inventory: Performs file read operations on user-supplied bibliographies, network requests using
urllib, and file write operations for JSON reporting. - Sanitization: Uses
urllib.parse.quotefor URL safety andre.subto normalize input text and strip potential control characters. - [DATA_EXFILTRATION]: No unauthorized data exfiltration is detected. The script only transmits citation metadata (titles, authors, and DOIs) to the verification APIs as required for its stated purpose.
Audit Metadata