uspto-database
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the uspto-opendata-python library and interacts with official USPTO API endpoints such as search.patentsview.org, tsdrapi.uspto.gov, and assignment-api.uspto.gov. These are established services for intellectual property data and the skill does not attempt to execute remote code from untrusted sources.
- [CREDENTIALS_UNSAFE]: The skill requires a USPTO API key for operation. It correctly advises users to manage this secret using environment variables and provides warnings against hardcoding the key in source code, which aligns with standard security best practices for secret management.
- [COMMAND_EXECUTION]: Helper scripts include command-line interfaces for patent and trademark searches. Analysis indicates these are restricted utility functions for querying specific data points and do not introduce risks of arbitrary shell command execution or command injection.
Audit Metadata