light-venue-matching

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues or malicious patterns were identified during the analysis. The skill is designed for legitimate academic research and data retrieval.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes a Python script (scripts/venue_signal.py) to fetch journal and author information from the OpenAlex API (api.openalex.org). OpenAlex is a well-known and trusted academic service. The script performs these requests safely using Python's standard urllib and json libraries, avoiding risks associated with remote code execution or unsafe data parsing.
  • [DATA_EXFILTRATION]: Requests to the OpenAlex API include an identifier string in the User-Agent as required by the service's "polite pool" policy. This practice is standard for responsible API consumption and does not involve the collection or transmission of sensitive personal or local information.
  • [PROMPT_INJECTION]: The skill instructions include strict internal guidelines (referred to as "ironclad rules") that prevent the AI from fabricating precise acceptance rates or statistics when official data is unavailable. This enhances the reliability and safety of the agent's output without compromising the host environment.
  • [COMMAND_EXECUTION]: While the skill includes a Python script for data processing, it does not invoke shell commands, use the subprocess module, or utilize dynamic execution functions like eval() or exec(). All arguments passed to the script are handled through standard argument parsing and URL encoding.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 05:04 AM
Security Audit — agent-trust-hub — light-venue-matching