bioinformatics

SUSPICIOUS: the gateway’s behavior is mostly aligned with its stated purpose and uses plausible same-org sources, so it does not look malicious. However, it is inherently a transitive-trust skill that fetches external instructions and potentially executable pipelines, which raises medium risk from downstream content and indirect prompt injection.