citation-verifier
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script uses
urllib.requestto fetch HTML content from URLs provided in paper notes. This is the primary function of the skill and is implemented with security constraints, including a 15-second timeout and a 2MB download limit per request to prevent resource exhaustion.\n- [DATA_EXFILTRATION]: Network requests are restricted to fetching metadata from external paper URLs. The skill does not access sensitive local files (such as SSH keys or credentials) or exfiltrate environment data.\n- [COMMAND_EXECUTION]: The script does not use functions likeos.systemorsubprocess.runto execute shell commands. It processes data using standard Python logic and string manipulation.\n- [PROMPT_INJECTION]: The instructions in the skill metadata and documentation are focused on functional tasks and do not attempt to override agent safety protocols or hijack the AI's behavior.
Audit Metadata