ii-commons
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npxandspawnSyncto execute the@intelligentinternet/ii-commonsCLI tool. This is the intended primary purpose of the skill for retrieving research data. - [EXTERNAL_DOWNLOADS]: The skill fetches the
@intelligentinternet/ii-commonspackage from the official npm registry and makes network requests tocommons.ii.incto retrieve document data. These are well-known and documented infrastructure components for this research service. - [DATA_EXFILTRATION]: While the skill communicates with an external API (
commons.ii.inc), it is for the purpose of retrieving research data (arXiv, PubMed). No evidence was found of sensitive local data being transmitted.
Audit Metadata