alterlab-cobrapy

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the cobra library (COBRApy) via uv pip install. This is an established scientific package required for the skill's metabolic analysis functionality.
  • [DATA_EXFILTRATION]: The library includes a functional feature that performs remote lookups against established scientific repositories, such as BiGG and BioModels, when loading models by identifier. This is a standard behavior for retrieving research models from public databases.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external metabolic model files.
  • Ingestion points: Metabolic models are loaded from the file system using functions like read_sbml_model(), load_json_model(), and load_yaml_model() as described in SKILL.md.
  • Boundary markers: There are no specialized delimiters defined in the skill instructions to isolate the content of loaded model files from the agent's instruction stream.
  • Capability inventory: The skill is configured with Read, Write, Edit, and Bash tools, which are used to read model data and write simulation results, such as CSV reports and visualization images.
  • Sanitization: The skill relies on standard library parsing mechanisms; no additional content sanitization or verification steps are specified for the ingested model files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:36 PM