jk-trial-data-scoping
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script scripts/clinical_trials.py performs HTTP GET requests to the public ClinicalTrials.gov API (clinicaltrials.gov). This is an expected behavior for a trial scoping tool and targets a well-known, official government service.
- [COMMAND_EXECUTION]: The skill documentation includes command-line interface (CLI) examples for running the included Python scripts. These are intended for user-initiated execution of the skill's features.
- [SAFE]: The script scripts/common.py uses dynamic importing via importlib.import_module to load the requests library. The module name is hardcoded, preventing any path injection or unauthorized module loading.
- [SAFE]: The skill processes data from external API responses and user-provided documents. It acts as a data aggregator and formatter, with no patterns suggesting that untrusted data is used to execute code or drive sensitive autonomous logic.
Audit Metadata