searching-academic-outputs-with-dimensions

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute search queries by piping Dimensions Search Language (DSL) strings to the shortwing CLI utility. This is the intended and primary mechanism for the skill's functionality.
  • [CREDENTIALS_UNSAFE]: The documentation identifies ~/.dimensions/dsl.ini and environment variables like DIMENSIONS_KEY as storage locations for API credentials. These are standard practices for CLI tools and no instructions are provided to the agent to read or exfiltrate these files.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the shortwing tool from a local directory (~/aves/shortwing) using uv pip install. This references local infrastructure rather than an untrusted remote source.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 09:16 PM