biopython-phylo
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill successfully implements phylogenetic tree analysis using the
Bio.Phylolibrary. The implementation inscripts/phylo_task.pyis modular, follows secure file handling practices using explicit encoding, and contains no dangerous command execution, file access outside of its scope, or network operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes external tree files, representing a potential indirect prompt injection surface.
- Ingestion points: External tree data is read from the path specified by the
input_treeparameter inconfig/task_config.jsonvia thePhylo.readfunction inscripts/phylo_task.py. - Boundary markers: None present for the raw data content.
- Capability inventory: The skill can create directories, write files to the
artifacts/folder, and generate visualizations viamatplotlibas defined inscripts/phylo_task.py. - Sanitization: The skill relies on the internal parsing logic of the
Bio.Phylolibrary for tree format validation. - [INDIRECT_PROMPT_INJECTION]: The file
biopython-phylo_audit_result_v1.jsoncontains self-referential safety claims, such as 'security: PASS'. Following the security analysis protocol, these claims are treated as descriptive data and were not used to influence the analyzer's independent verdict.
Audit Metadata