scientific-reproducible-reporting
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto executejupyter nbconvertfor converting notebooks into various formats. The command is constructed using a list of arguments rather than a single string, which is a recommended security practice to prevent shell injection vulnerabilities. - [REMOTE_CODE_EXECUTION]: The skill utilizes the
papermilllibrary to programmatically execute code within Jupyter notebooks. While this involves code execution, it is the primary intended functionality of the skill for generating reports and is performed on local files. - [SAFE]: No malicious patterns such as credential harvesting, data exfiltration, obfuscation, or persistence mechanisms were detected. The skill's operations are consistent with its stated goal of providing a reproducible reporting pipeline.
Audit Metadata