paper-harbor

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses PowerShell scripts with the -ExecutionPolicy Bypass flag to initialize the browser environment and setup Zotero connectivity.
  • [COMMAND_EXECUTION]: Local Python scripts use the DrissionPage library to automate searching and metadata extraction from academic databases through browser automation.
  • [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the DrissionPage Python package in requirements.txt.
  • [EXTERNAL_DOWNLOADS]: The skill provides scripts to open official download pages for Zotero and the EasyScholar browser extension.
  • [DATA_EXFILTRATION]: The skill's zotero_bridge.py script accesses the local zotero.sqlite database file to check for existing literature items. This is a sensitive local file containing the user's research library metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 08:19 AM
Security Audit — agent-trust-hub — paper-harbor