aminer-academic-search
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary functionality is to retrieve and process academic data from the official AMiner platform. All analyzed code and instructions are consistent with this purpose.
- [CREDENTIALS_SAFE]: The skill manages authentication via an environment variable (
AMINER_API_KEY) and includes clear instructions to the agent to avoid exposing this token in plain text, following standard security practices. - [COMMAND_EXECUTION]: The shell command included in the instructions is a standard existence check for an environment variable (
[ -z "${AMINER_API_KEY+x}" ] ...) and does not involve arbitrary or dangerous command execution. - [REMOTE_CODE_EXECUTION]: The Python client (
scripts/aminer_client.py) uses the Python standard library to communicate with the vendor's API. It does not download or execute code from untrusted sources, nor does it use dangerous functions likeeval()orexec()on external data. - [DATA_EXFILTRATION]: Network operations are restricted to the official AMiner API endpoint (
https://datacenter.aminer.cn) for the purpose of academic search. No attempts to exfiltrate sensitive local data were detected.
Audit Metadata