paper-spine
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/citation_verification_zh.pyperforms network requests toapi.crossref.orgto verify DOI information. This is a well-known and legitimate scientific service used to validate citation authenticity as part of the tool's core functionality. - [COMMAND_EXECUTION]: The skill uses shell wrappers (
scripts/launch_paperspine_ui.ps1andscripts/launch_paperspine_ui.sh) to launch an interactive terminal TUI (scripts/intake_wizard.py). These commands are used to provide a configuration interface for the user and do not involve untrusted input or remote code execution. Additionally,os.system()is used within the wizard for benign environment management tasks such as clearing the console or setting character encoding.
Audit Metadata