asset-dashboard-search
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with official Patsnap API endpoints (
connect.zhihuiya.com). These are well-known services associated with the skill author 'patsnap' and represent standard functionality for patent data retrieval. - [CREDENTIALS_UNSAFE]: The skill correctly handles authentication by instructing users to use environment variables (
ZHIHUIYA_API_TOKEN) or command-line arguments. It avoids hardcoding secrets and provides a safe placeholder (<token>) in documentation. - [COMMAND_EXECUTION]: The skill uses Python's
argparseandrequestslibrary to perform API calls. The command-line interface inscripts/p002_applicant_search.pysafely handles user-supplied parameters for the search query without exposing the system to command injection. - [DATA_EXFILTRATION]: Network operations are restricted to the vendor's own API domains for the purpose of patent search. No patterns of sensitive local file access or unauthorized data transmission were detected.
Audit Metadata