labarchive-integration

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill integrates with LabArchives, a legitimate research platform. All remote endpoints (api.labarchives.com, auapi.labarchives.com, ukapi.labarchives.com) are official regional API bases for the service.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing labarchives-py from a GitHub repository (github.com/mcmero/labarchives-py). This is a standard Python wrapper for the LabArchives API and is used consistently across all scripts.
  • [CREDENTIALS_SAFE]: The setup_config.py script specifically implements os.chmod(output_path, 0o600) to ensure that configuration files containing API keys are only readable by the owner. The documentation also explicitly warns against committing credentials to version control and suggests using environment variables.
  • [COMMAND_EXECUTION]: The skill uses uv run python to execute its own scripts (setup_config.py, notebook_operations.py, entry_operations.py). These scripts perform standard API operations such as fetching user info, listing notebooks, and uploading files using the requests library or the labarchivespy client.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:13 AM