paper-analyzer
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads PDF documents, LaTeX sources, and abstract metadata from
arxiv.org. This is a core functionality for a paper analyzer and targets a well-known, trusted scientific repository.- [COMMAND_EXECUTION]: Utilizesrun_terminalto execute provided Python scripts (generate_note.py,update_graph.py) andcurlcommands. These actions are transparently documented in the workflow and serve the intended purpose of file management and data retrieval.- [DATA_EXFILTRATION]: Network activity is confined to fetching research materials from arXiv. No patterns suggesting unauthorized access to sensitive local files or transmission of credentials were found.- [REMOTE_CODE_EXECUTION]: Although automated scans flagged the downloading of PDFs as a potential execution risk, analysis confirms that the skill treats these files as data objects for summarization and analysis rather than executable scripts. No evidence of command injection or malicious execution was found.
Audit Metadata