labarchive-integration
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with LabArchives, a legitimate research platform. All remote endpoints (api.labarchives.com, auapi.labarchives.com, ukapi.labarchives.com) are official regional API bases for the service.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing
labarchives-pyfrom a GitHub repository (github.com/mcmero/labarchives-py). This is a standard Python wrapper for the LabArchives API and is used consistently across all scripts. - [CREDENTIALS_SAFE]: The
setup_config.pyscript specifically implementsos.chmod(output_path, 0o600)to ensure that configuration files containing API keys are only readable by the owner. The documentation also explicitly warns against committing credentials to version control and suggests using environment variables. - [COMMAND_EXECUTION]: The skill uses
uv run pythonto execute its own scripts (setup_config.py,notebook_operations.py,entry_operations.py). These scripts perform standard API operations such as fetching user info, listing notebooks, and uploading files using therequestslibrary or thelabarchivespyclient.
Audit Metadata