chem-nmr-predict Rapport d’audit.

Avertissements

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The script uses `requests.get` without an explicit timeout, which could cause the agent to hang indefinitely if the NMRdb.org service is unresponsive.
• Network errors (e.g., connection failure, HTTP errors) are not explicitly handled in the script; the agent may receive an unhandled exception instead of a graceful failure message.
• The SKILL.md does not mention any rate‑limiting or usage policy for the NMRdb.org API, which could lead to unintended load or service abuse.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• Stars/forks activity: 161 stars, 24 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Méthode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.