Skills
skills/canxiangcc/aminer-open-skill/aminer-daily-paper/Gen Agent Trust Hub

aminer-daily-paper

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/handle_trigger.py executes an internal Python script scripts/run_pipeline.py to process requests. This execution is performed using subprocess.run with a structured list of arguments and sys.executable, which is a secure practice that prevents shell injection vulnerabilities.
  • [SAFE]: The skill includes defensive programming for file path handling in scripts/handle_trigger.py. The _resolve_interface_papers_file function validates that provided file paths are within the skill's base directory and restricted to the .json extension, protecting against path traversal and arbitrary file access.
  • [SAFE]: Network activity is directed to the documented AMiner API endpoint (datacenter.aminer.cn). Sensitive information, specifically the AMINER_API_KEY, is managed via environment variables and is not hardcoded within the source files.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 07:01 AM