journal-if
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads updated journal impact factor data from the vendor's GitHub repository and queries the OpenAlex API for live data. These are legitimate sources required for the skill's primary function and originate from the vendor's own infrastructure or well-known academic services. \n- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it processes journal names from user-provided files and external API responses. However, the risk is minimal as the skill handles structured data (CSV/JSON) and performs standard string normalization and URL encoding before processing. \n- [SAFE]: No malicious patterns such as prompt injection, persistence mechanisms, or credential exfiltration were detected. The skill's functionality is consistent with its stated purpose.
Audit Metadata