paper-harbor
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses PowerShell scripts with the
-ExecutionPolicy Bypassflag to initialize the browser environment and setup Zotero connectivity. - [COMMAND_EXECUTION]: Local Python scripts use the
DrissionPagelibrary to automate searching and metadata extraction from academic databases through browser automation. - [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the
DrissionPagePython package inrequirements.txt. - [EXTERNAL_DOWNLOADS]: The skill provides scripts to open official download pages for Zotero and the EasyScholar browser extension.
- [DATA_EXFILTRATION]: The skill's
zotero_bridge.pyscript accesses the localzotero.sqlitedatabase file to check for existing literature items. This is a sensitive local file containing the user's research library metadata.
Audit Metadata