alterlab-clinvar
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves genetic variant information and clinical summaries from official National Center for Biotechnology Information (NCBI) E-utilities API and FTP servers (ncbi.nlm.nih.gov).
- [COMMAND_EXECUTION]: Provides instructions and utility scripts for using standard bioinformatics tools such as curl, wget, bcftools, and Python to automate data retrieval and genomic analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the ClinVar database, which represents a potential surface for indirect prompt injection if malicious content were present in the source records.
- Ingestion points: Variant summaries and XML records retrieved from eutils.ncbi.nlm.nih.gov and bulk data from ftp.ncbi.nlm.nih.gov.
- Boundary markers: None explicitly implemented; the skill retrieves and displays records directly.
- Capability inventory: The skill has access to WebFetch, Bash(curl), and Bash(python), enabling network requests and local data processing.
- Sanitization: None; data is processed as scientific records without specific natural language filtering.
Audit Metadata