ecommerce-patent-cited-by
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/patent_cited_by.py) to handle API communication and data persistence. The script is invoked via the shell tool as part of the standard skill workflow. - [DATA_EXPOSURE]: The script writes full API responses to the local project directory under
nexscope/. It also maintains session metadata (_meta.json) and a usage index (index.jsonl) to track activity. This local storage is documented as the standard output strategy for the skill. - [SAFE]: The skill follows security best practices by requiring credentials (
NEXSCOPE_API_KEY) to be provided via environment variables rather than hardcoding them. No suspicious network operations, obfuscation, or persistence mechanisms were found.
Audit Metadata