alterlab-pubchem
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes biological and chemical assay data from the National Center for Biotechnology Information (NCBI) PubChem API. While the agent ingests external data, the source is a highly reputable government scientific repository.
- Ingestion points: API responses are processed in
scripts/bioactivity_query.py(viaget_bioassay_summaryandget_compound_annotations) andscripts/compound_search.py(viaget_compound_properties). - Boundary markers: The instructions do not define specific delimiters for handling external text data.
- Capability inventory: The skill utilizes
pubchempyto write structure files (pcp.download) and makes standard network requests to NCBI domains. - Sanitization: The skill performs standard JSON parsing on data retrieved from the trusted PubChem services.
- [COMMAND_EXECUTION]: The skill employs
Bash(python:*)andBash(curl:*)to execute local helper scripts and interact with the PubChem API. These operations are restricted to the intended purpose of querying chemical database records and retrieving molecular properties.
Audit Metadata