paper-spine

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/citation_verification_zh.py performs network requests to api.crossref.org to verify DOI information. This is a well-known and legitimate scientific service used to validate citation authenticity as part of the tool's core functionality.
  • [COMMAND_EXECUTION]: The skill uses shell wrappers (scripts/launch_paperspine_ui.ps1 and scripts/launch_paperspine_ui.sh) to launch an interactive terminal TUI (scripts/intake_wizard.py). These commands are used to provide a configuration interface for the user and do not involve untrusted input or remote code execution. Additionally, os.system() is used within the wizard for benign environment management tasks such as clearing the console or setting character encoding.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 03:36 AM
Security Audit — agent-trust-hub — paper-spine