alterlab-ena

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: Network communication is exclusively directed to the official European Nucleotide Archive (ENA) domains (ebi.ac.uk). These are well-known and trusted scientific resources managed by the European Bioinformatics Institute (EMBL-EBI). There is no access to sensitive local files, environment variables, or hardcoded credentials.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external scientific databases.
  • Ingestion points: External data enters the system via the Portal, Browser, and Taxonomy APIs at ebi.ac.uk as implemented in scripts/query_ena.py.
  • Boundary markers: Not applicable, as the skill functions as a retrieval utility and does not interpolate external data back into system-level instructions.
  • Capability inventory: The skill uses requests for network retrieval and standard CLI argument parsing. No dangerous capabilities like eval, exec, or arbitrary file writes are present.
  • Sanitization: The skill utilizes standard JSON parsing for API responses, which is a safe practice.
  • [COMMAND_EXECUTION]: The skill uses Bash(python:*) and Bash(curl:*) to execute its helper script and interact with web services. This is consistent with its stated purpose of querying biological databases. No malicious or unauthorized command patterns were detected.
  • [SAFE]: No obfuscation (Base64, zero-width characters, or homoglyphs) was found. The skill does not attempt to establish persistence, escalate privileges, or hide its true functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:36 PM