alterlab-ginkgo-cloud
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages external data ingestion which presents a potential vulnerability surface.
- Ingestion points: As described in SKILL.md and referenced files, the skill expects to process linear DNA sequences (in .fasta, .csv, .xlsx, .txt, .pdf, or .zip formats) and design files (such as PNG or SVG) provided by the user.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the input data.
- Capability inventory: The YAML frontmatter grants the skill broad capabilities including file system access (Read, Write, Edit) and shell command execution via Bash (specifically for python and curl).
- Sanitization: There is no evidence of input validation or sanitization routines for the handled file formats.
Audit Metadata