reagent-substitute-scout
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves reagent information and literature citations from well-known scientific APIs. Evidence:
scripts/main.pyperforms HTTP GET requests to the National Center for Biotechnology Information (NCBI) athttps://eutils.ncbi.nlm.nih.gov/entrez/eutilsfor PubMed citations;scripts/main.pyaccesseshttps://pubchem.ncbi.nlm.nih.gov/rest/pugto retrieve chemical properties and similarity data. \n- [COMMAND_EXECUTION]: The skill facilitates the execution of a packaged Python script to process user queries. Evidence:SKILL.mdprovides instructions for runningscripts/main.pywith various arguments to perform chemical analysis. \n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external scientific sources, creating a potential surface for indirect injection via processed literature summaries. Evidence: Ingestion points:scripts/main.pyfetches data from the PubMed API which includes external article titles and metadata; Boundary markers: The skill employs structured output formats (JSON, Table, Markdown) as defined in theOutputFormatterclass to isolate external data from the agent's instructions; Capability inventory: The script performs network read operations and local file writes to save reports; Sanitization: Content is handled through structured data models and standard formatting libraries.
Audit Metadata