alterlab-monarch
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from the Monarch Initiative API, which represents a surface for indirect prompt injection where external data could potentially influence agent behavior.
- Ingestion points: JSON responses from the
/v3/api/association,/v3/api/search, and/v3/api/entityendpoints inSKILL.mdandscripts/query_monarch.py. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the provided files.
- Capability inventory: The skill has access to
Bash(curl:*)andBash(python:*), enabling execution of commands based on processed input. - Sanitization: There is no evidence of explicit sanitization or validation of the API data before use in the logic.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to
api-v3.monarchinitiative.orgto fetch genomic and phenotypic association data. These requests target established research infrastructure for the skill's primary academic purpose. - [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/query_monarch.py) and provides code examples for the agent to execute Python and curl commands to interact with the Monarch Initiative API.
Audit Metadata