nature-academic-search
Pass
Audited by Gen Agent Trust Hub on May 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with well-known and authoritative academic APIs including NCBI PubMed, CrossRef, and arXiv. These integrations are used for searching literature and fetching metadata.
- [SAFE]: Credential management follows security best practices. The skill uses environment variables (
PUBMED_EMAIL,NCBI_API_KEY) and local configuration files for user-provided identifiers, avoiding hardcoded secrets. - [SAFE]: The installation script (
install.sh) performs routine tasks such as installing dependencies via pip and configuring the local MCP environment. It does not exhibit suspicious behavior such as downloading and piping remote scripts into the shell. - [SAFE]: Diagnostic analysis of
mcp-server/tests/test_sources.pyidentified the use of dynamic module loading (__import__), which was confirmed as a standard implementation detail for mocking and unit testing purposes.
Audit Metadata