alterlab-cobrapy
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
cobralibrary (COBRApy) viauv pip install. This is an established scientific package required for the skill's metabolic analysis functionality. - [DATA_EXFILTRATION]: The library includes a functional feature that performs remote lookups against established scientific repositories, such as BiGG and BioModels, when loading models by identifier. This is a standard behavior for retrieving research models from public databases.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external metabolic model files.
- Ingestion points: Metabolic models are loaded from the file system using functions like
read_sbml_model(),load_json_model(), andload_yaml_model()as described inSKILL.md. - Boundary markers: There are no specialized delimiters defined in the skill instructions to isolate the content of loaded model files from the agent's instruction stream.
- Capability inventory: The skill is configured with
Read,Write,Edit, andBashtools, which are used to read model data and write simulation results, such as CSV reports and visualization images. - Sanitization: The skill relies on standard library parsing mechanisms; no additional content sanitization or verification steps are specified for the ingested model files.
Audit Metadata