alterlab-biopython
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches biological sequences, publication metadata, and search results from NCBI's official Entrez and BLAST web services. These network operations target well-known scientific repositories.
- [COMMAND_EXECUTION]: Includes patterns for executing local bioinformatics command-line utilities like BLAST+, Clustal Omega, MUSCLE, and DSSP using Biopython's official wrapper classes. This is standard functionality for scientific software integration.
- [PROMPT_INJECTION]: Indirect prompt injection surface detected. 1. Ingestion points: Reads and parses external biological files (FASTA, GenBank, PDB, FASTQ) and XML responses from NCBI. 2. Boundary markers: None identified in instructions for separating data from logic. 3. Capability inventory: Includes file system writes, network operations to NCBI, and shell command execution via subprocess wrappers. 4. Sanitization: Relies on standard Biopython parsers; no explicit validation of metadata or sequence headers is implemented to prevent potential injection from malicious biological records.
Audit Metadata