paper-analyzer

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads PDF documents, LaTeX sources, and abstract metadata from arxiv.org. This is a core functionality for a paper analyzer and targets a well-known, trusted scientific repository.- [COMMAND_EXECUTION]: Utilizes run_terminal to execute provided Python scripts (generate_note.py, update_graph.py) and curl commands. These actions are transparently documented in the workflow and serve the intended purpose of file management and data retrieval.- [DATA_EXFILTRATION]: Network activity is confined to fetching research materials from arXiv. No patterns suggesting unauthorized access to sensitive local files or transmission of credentials were found.- [REMOTE_CODE_EXECUTION]: Although automated scans flagged the downloading of PDFs as a potential execution risk, analysis confirms that the skill treats these files as data objects for summarization and analysis rather than executable scripts. No evidence of command injection or malicious execution was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 01:26 PM