alterlab-drugbank
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to facilitate pharmaceutical research, drug-drug interaction analysis, and chemical similarity searches using the DrugBank database. Its behavior aligns with its stated academic and research purpose.
- [DATA_EXPOSURE]: The skill manages authentication for the DrugBank database. It correctly instructs users to store credentials in environment variables or configuration files (
~/.config/drugbank.ini) rather than hardcoding them. This aligns with secure secret management practices. - [EXTERNAL_DOWNLOADS]: The skill utilizes standard, well-known Python packages for bioinformatics and data science, such as
drugbank-downloader,rdkit,pandas, andnetworkx. Data downloads are targeted at the official DrugBank domain (go.drugbank.com), which is necessary for the skill's core functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes DrugBank XML data. While this involves ingesting external data, the source is a curated, professional database. The use of structured XML parsing (
xml.etree.ElementTreeandlxml) and the lack of automated agent decision-making based on unvalidated data strings mitigate the risk of indirect prompt injection.
Audit Metadata