light-venue-matching
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were identified during the analysis. The skill is designed for legitimate academic research and data retrieval.
- [EXTERNAL_DOWNLOADS]: The skill utilizes a Python script (
scripts/venue_signal.py) to fetch journal and author information from the OpenAlex API (api.openalex.org). OpenAlex is a well-known and trusted academic service. The script performs these requests safely using Python's standardurllibandjsonlibraries, avoiding risks associated with remote code execution or unsafe data parsing. - [DATA_EXFILTRATION]: Requests to the OpenAlex API include an identifier string in the User-Agent as required by the service's "polite pool" policy. This practice is standard for responsible API consumption and does not involve the collection or transmission of sensitive personal or local information.
- [PROMPT_INJECTION]: The skill instructions include strict internal guidelines (referred to as "ironclad rules") that prevent the AI from fabricating precise acceptance rates or statistics when official data is unavailable. This enhances the reliability and safety of the agent's output without compromising the host environment.
- [COMMAND_EXECUTION]: While the skill includes a Python script for data processing, it does not invoke shell commands, use the
subprocessmodule, or utilize dynamic execution functions likeeval()orexec(). All arguments passed to the script are handled through standard argument parsing and URL encoding.
Audit Metadata