paper-trending

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches trending paper metadata from HuggingFace's public API (huggingface.co/api/daily_papers). This is a well-known service for machine learning research and the usage is consistent with the skill's primary purpose.
  • [EXTERNAL_DOWNLOADS]: The skill downloads PDF files from arXiv (arxiv.org/pdf/{id}). arXiv is a trusted academic repository. The skill includes safety considerations such as a 1-second delay between requests to avoid rate limiting and a size check for files over 50MB.
  • [COMMAND_EXECUTION]: The skill uses curl to download PDFs into a local papers/ directory. This is a standard operation for file management and is restricted to the specific arXiv domain.
  • [DATA_EXFILTRATION]: No sensitive data access or unauthorized exfiltration patterns were detected. Network operations are limited to HuggingFace for metadata and arXiv for paper retrieval.
  • [PROMPT_INJECTION]: No evidence of prompt injection, role-play bypass, or system prompt extraction attempts was found in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 03:42 AM
Security Audit — agent-trust-hub — paper-trending