alterlab-ena
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: Network communication is exclusively directed to the official European Nucleotide Archive (ENA) domains (
ebi.ac.uk). These are well-known and trusted scientific resources managed by the European Bioinformatics Institute (EMBL-EBI). There is no access to sensitive local files, environment variables, or hardcoded credentials. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external scientific databases.
- Ingestion points: External data enters the system via the Portal, Browser, and Taxonomy APIs at
ebi.ac.ukas implemented inscripts/query_ena.py. - Boundary markers: Not applicable, as the skill functions as a retrieval utility and does not interpolate external data back into system-level instructions.
- Capability inventory: The skill uses
requestsfor network retrieval and standard CLI argument parsing. No dangerous capabilities likeeval,exec, or arbitrary file writes are present. - Sanitization: The skill utilizes standard JSON parsing for API responses, which is a safe practice.
- [COMMAND_EXECUTION]: The skill uses
Bash(python:*)andBash(curl:*)to execute its helper script and interact with web services. This is consistent with its stated purpose of querying biological databases. No malicious or unauthorized command patterns were detected. - [SAFE]: No obfuscation (Base64, zero-width characters, or homoglyphs) was found. The skill does not attempt to establish persistence, escalate privileges, or hide its true functionality.
Audit Metadata