citation-management
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_schematic.pyutilizessubprocess.runto orchestrate an internal workflow by executinggenerate_schematic_ai.py. This is a legitimate use of command execution to facilitate the generation of scientific diagrams as described in the skill's purpose. - [EXTERNAL_DOWNLOADS]: The skill makes extensive and appropriate use of network requests to well-known academic services. These include CrossRef (api.crossref.org), NCBI PubMed (eutils.ncbi.nlm.nih.gov), arXiv (export.arxiv.org), and OpenRouter (openrouter.ai) for citation retrieval and AI-assisted tasks.
- [CREDENTIALS_SAFE]: The skill requires several API keys (OPENROUTER_API_KEY, NCBI_API_KEY) and sensitive identifiers (NCBI_EMAIL). It follows safe practices by instructing the user to provide these via environment variables or a
.envfile rather than hardcoding them in scripts.
Audit Metadata