alterlab-reactome
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from local files, such as gene lists and expression TSV matrices, which are then processed and sent to the Reactome API. Ingestion points: The
command_analyzefunction inscripts/reactome_query.pyreads user-provided files, as do the code snippets inSKILL.md. Boundary markers: The skill does not define specific delimiters or instructions to prevent the agent from interpreting content within the ingested files as instructions. Capability inventory: The skill usesBash(python:*)to run helper scripts,requestsfor network POST operations toreactome.org, andopen()for local file reading and writing. Sanitization: The script performs basic whitespace stripping and regex-based HTML tag removal from API responses, but lacks validation for the ingested input data.\n- [COMMAND_EXECUTION]: The skill documentation instructs the agent to execute a Python helper script via the shell for various biological database operations. Evidence:SKILL.mdprovides multiple examples of runningscripts/reactome_query.pywith theuvtool to query version information, search for pathways, and analyze data.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and use of a domain-specific Python package for pathway analysis. Evidence:SKILL.mdincludes installation instructions for thereactome2pylibrary, which is the official Python client for the Reactome service.
Audit Metadata