bibcite

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to run or install the bibcite-cli utility using uvx or uv tool install. This is the core dependency required for the skill's functionality.
  • [COMMAND_EXECUTION]: The skill executes shell commands via the bibcite CLI to add, remove, and update citations within .bib files. It uses appropriate patterns like heredocs (<<'EOF') for passing potentially complex BibTeX strings to standard input.
  • [DATA_EXFILTRATION]: The tool performs network requests to verified online citation databases (such as DBLP or arXiv) to fetch and verify metadata. This behavior is consistent with the stated purpose of resolving and canonicalizing citations.
  • [SAFE]: The skill manages a local cache at ~/.cache/bibcite/ to improve performance and respect rate limits of external sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 09:32 AM
Security Audit — agent-trust-hub — bibcite