ieee-export

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script (push_to_zotero.py) to process citation data and transmit it to the Zotero desktop application via its local API (localhost:23119).\n- [EXTERNAL_DOWNLOADS]: The skill fetches PDF documents from ieeexplore.ieee.org, which is a well-known and expected service for research papers. This action is core to the skill's utility.\n- [DATA_EXFILTRATION]: The skill processes session cookies to authenticate PDF downloads from the IEEE platform. This information is handled locally within the script and sent only to the legitimate IEEE domain.\n- [PROMPT_INJECTION]: By extracting metadata (such as titles and abstracts) from external web pages, the skill provides an indirect prompt injection surface; however, the script handles this data as structured information without executing it.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 07:11 AM