pm-export
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a Python script located at a specific local path (
e:/pm-skills/.claude/skills/pm-export/scripts/push_to_zotero.py) via the shell. This script is used to process paper metadata and push it to the Zotero desktop application. - [EXTERNAL_DOWNLOADS]: Fetches paper metadata, abstracts, and MEDLINE records from the official National Center for Biotechnology Information (NCBI) E-utils API (
https://eutils.ncbi.nlm.nih.gov). - [EXTERNAL_DOWNLOADS]: Downloads PDF documents from PubMed Central (
https://www.ncbi.nlm.nih.gov/pmc/articles/...) using the Python standard library'surllibmodule. - [DATA_EXFILTRATION]: Communicates with the local Zotero Connector API at
http://127.0.0.1:23119to save paper records and upload attachments. This constitutes local network communication necessary for the skill's primary function.
Audit Metadata