aminer-academic-search

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary functionality is to retrieve and process academic data from the official AMiner platform. All analyzed code and instructions are consistent with this purpose.
  • [CREDENTIALS_SAFE]: The skill manages authentication via an environment variable (AMINER_API_KEY) and includes clear instructions to the agent to avoid exposing this token in plain text, following standard security practices.
  • [COMMAND_EXECUTION]: The shell command included in the instructions is a standard existence check for an environment variable ([ -z "${AMINER_API_KEY+x}" ] ...) and does not involve arbitrary or dangerous command execution.
  • [REMOTE_CODE_EXECUTION]: The Python client (scripts/aminer_client.py) uses the Python standard library to communicate with the vendor's API. It does not download or execute code from untrusted sources, nor does it use dangerous functions like eval() or exec() on external data.
  • [DATA_EXFILTRATION]: Network operations are restricted to the official AMiner API endpoint (https://datacenter.aminer.cn) for the purpose of academic search. No attempts to exfiltrate sensitive local data were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 08:22 AM