clinical-trial-finder
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: Detailed analysis of the skill's 12 files identified no malicious patterns, hidden code, or unauthorized data access. The skill implementation is consistent with its stated purpose as a medical research tool.
- [EXTERNAL_DOWNLOADS]: The skill fetches clinical trial data and genomic associations from public, authoritative scientific registries including ClinicalTrials.gov, the EBI GWAS Catalog, OpenTargets Platform, and the EU Clinical Trials Register. These network operations are appropriate for the medical research domain and utilize standard, secure protocols with adequate error handling.
- [COMMAND_EXECUTION]: The entry point and shell scripts execute standard processing and output management tasks. The code employs security best practices, such as robust shell-quoting in generated reproducibility scripts, to prevent potential command injection vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied search terms for integration into scientific API queries. It mitigates injection risks by applying standard URL encoding for network requests and HTML escaping for report generation, ensuring untrusted input does not compromise system behavior.
Audit Metadata