light-venue-matching
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill programmatically retrieves metadata from well-known scholarly APIs, specifically api.openalex.org and doaj.org. These are legitimate, established technology services in the research community used for academic indexing.
- [COMMAND_EXECUTION]: A local script
scripts/venue_signal.pyis invoked to process publication metrics such as volume trends and self-citation rates. The script is authored by the vendor, uses standard Python built-in libraries (urllib, json, argparse), and contains logic to gracefully handle network failures or missing data. - [SAFE]: The instructions implement strict defensive constraints, referred to as "Iron Rules," which explicitly forbid the model from fabricating acceptance percentages or using non-official community estimates as definitive probabilities. This reduces the risk of model hallucinations.
- [SAFE]: Credential management follows best practices by retrieving the OpenAlex contact email from an environment variable (
OPENALEX_MAILTO) rather than hardcoding sensitive strings within the script or markdown files.
Audit Metadata