citation-management
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs legitimate network operations to fetch academic metadata from well-known scholarly infrastructure, including the CrossRef API, NCBI PubMed E-utilities, and the arXiv API.
- [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface for indirect prompt injection as it ingests and processes untrusted data from academic search results.
- Ingestion points: External content is retrieved via
scripts/search_google_scholar.py,scripts/search_pubmed.py, andscripts/extract_metadata.py. - Boundary markers: The skill does not use specific delimiters but processes data through specialized scripts to extract structured metadata.
- Capability inventory: The skill has access to
Bash,Write, andEdittools for performing searches and managing BibTeX files. - Sanitization: Data is sanitized using regular expression parsing and structured XML/JSON processing within the metadata extraction and formatting scripts.
Audit Metadata