citation-management

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/generate_schematic.py utilizes subprocess.run to orchestrate an internal workflow by executing generate_schematic_ai.py. This is a legitimate use of command execution to facilitate the generation of scientific diagrams as described in the skill's purpose.
  • [EXTERNAL_DOWNLOADS]: The skill makes extensive and appropriate use of network requests to well-known academic services. These include CrossRef (api.crossref.org), NCBI PubMed (eutils.ncbi.nlm.nih.gov), arXiv (export.arxiv.org), and OpenRouter (openrouter.ai) for citation retrieval and AI-assisted tasks.
  • [CREDENTIALS_SAFE]: The skill requires several API keys (OPENROUTER_API_KEY, NCBI_API_KEY) and sensitive identifiers (NCBI_EMAIL). It follows safe practices by instructing the user to provide these via environment variables or a .env file rather than hardcoding them in scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:12 AM