alterlab-pubchem

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes biological and chemical assay data from the National Center for Biotechnology Information (NCBI) PubChem API. While the agent ingests external data, the source is a highly reputable government scientific repository.
  • Ingestion points: API responses are processed in scripts/bioactivity_query.py (via get_bioassay_summary and get_compound_annotations) and scripts/compound_search.py (via get_compound_properties).
  • Boundary markers: The instructions do not define specific delimiters for handling external text data.
  • Capability inventory: The skill utilizes pubchempy to write structure files (pcp.download) and makes standard network requests to NCBI domains.
  • Sanitization: The skill performs standard JSON parsing on data retrieved from the trusted PubChem services.
  • [COMMAND_EXECUTION]: The skill employs Bash(python:*) and Bash(curl:*) to execute local helper scripts and interact with the PubChem API. These operations are restricted to the intended purpose of querying chemical database records and retrieving molecular properties.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:37 PM