ieee-export
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
push_to_zotero.py) to process citation data and transmit it to the Zotero desktop application via its local API (localhost:23119).\n- [EXTERNAL_DOWNLOADS]: The skill fetches PDF documents fromieeexplore.ieee.org, which is a well-known and expected service for research papers. This action is core to the skill's utility.\n- [DATA_EXFILTRATION]: The skill processes session cookies to authenticate PDF downloads from the IEEE platform. This information is handled locally within the script and sent only to the legitimate IEEE domain.\n- [PROMPT_INJECTION]: By extracting metadata (such as titles and abstracts) from external web pages, the skill provides an indirect prompt injection surface; however, the script handles this data as structured information without executing it.
Audit Metadata