alterlab-latchbio
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of bioinformatics pipelines that ingest untrusted data from external files and database records, creating a surface for indirect prompt injection.
- Ingestion points: The skill uses
LatchFileandLatchDirinreferences/data-management.mdandSKILL.mdto process external sequencing data andRegistryrecords. - Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between legitimate data and potential instructions embedded within the processed biological files.
- Capability inventory: The skill requires
Bash(python:*)andWriteaccess to generate and execute workflow code, which includes network operations (vialatch loginandlatch register) and file system access. - Sanitization: No evidence of data validation or sanitization was found in the provided code templates or instructions before data is used in workflow tasks.
Audit Metadata