draft-related-work
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/gather_candidates.pyscript fetches academic metadata (titles, years, abstracts) from Semantic Scholar's API (api.semanticscholar.org). This is a well-known service used for the skill's primary purpose of gathering citation data.- [COMMAND_EXECUTION]: The skill utilizes local Python scripts (audit_bib.py,check_coverage.py, andgather_candidates.py) to process bibliography files and metadata. These scripts rely exclusively on the Python standard library.- [DATA_EXPOSURE]: Thescripts/polite_http.pyutility includes a user-providedCONTACT_EMAILin the HTTP User-Agent header and usesS2_API_KEYfor authentication when interacting with scholarly APIs. These are standard practices for authorized and polite access to such services.
Audit Metadata