citation-management
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute local Python scripts such as search_google_scholar.py and validate_citations.py to automate the research workflow.- [EXTERNAL_DOWNLOADS]: The skill connects to well-known and trusted academic metadata services including CrossRef, NCBI PubMed E-utilities, arXiv, and DataCite to retrieve scholarly information.- [SAFE]: The skill has an indirect prompt injection surface because it processes untrusted data from external academic databases and user-provided BibTeX files while having file system access. However, this is consistent with its primary purpose and no malicious patterns are present. • Ingestion points: Academic search results, external API responses (CrossRef, PubMed, arXiv), and BibTeX files (SKILL.md). • Boundary markers: None explicitly mentioned in the instructions. • Capability inventory: Bash for running local scripts; Write and Edit for managing reference files. • Sanitization: Not detailed in the provided documentation.
Audit Metadata