pubmed-database
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with the official National Center for Biotechnology Information (NCBI) API at
eutils.ncbi.nlm.nih.gov. This is a well-known and trusted service for biomedical literature. - [CREDENTIALS_UNSAFE]: The provided Python implementation correctly utilizes environment variables (
NCBI_API_KEY,NCBI_CONTACT_EMAIL) to handle API authentication and contact information, avoiding hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from PubMed abstracts and citations. While this represents a potential attack surface for instructions embedded in external text, the source is a curated academic database, and the behavior is central to the skill's primary function.
Audit Metadata