nature-citation

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill interacts with well-known and trusted scholarly metadata services, specifically the Crossref REST API and NCBI PubMed E-utilities. These network requests are performed to retrieve bibliographic data (titles, authors, abstracts) and follow established API usage standards, including the use of identify headers for the Crossref "polite pool."
  • [DYNAMIC_EXECUTION]: The Python script generates a standalone HTML citation browser. This artifact contains embedded JavaScript for client-side filtering and download generation (using Blob URLs). All data processing within this HTML file occurs locally in the user's browser without external data transmission.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied manuscript text and claims. While this provides a potential attack surface for instructions embedded in data, the skill mitigates this through strict core principles that require the agent to evaluate evidence conservatively, verify metadata against publisher pages, and ignore title-only relevance.
  • [SAFE]: The inclusion and use of the defusedxml library for parsing PubMed XML responses is a security feature, protecting the environment from XML External Entity (XXE) vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 01:04 PM