benchling-integration
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation guides the installation of the official
benchling-sdkfrom the Python Package Index (PyPI). This is a standard dependency for interacting with the Benchling platform. - [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to ingest untrusted data from external sources, such as biological sequence information in FASTA format or data from synchronized external systems, which is then used to populate registry entities and notebook entries.
- Ingestion points: Processes external sequence files (e.g.,
sequences.fasta) and data from external databases or AWS EventBridge integrations. - Boundary markers: No specific delimiters or safety instructions are included in the example code to prevent the agent from interpreting embedded text within biological sequences or metadata as instructions.
- Capability inventory: The skill possesses extensive write capabilities within the Benchling environment (creating/archiving DNA/RNA/Protein sequences, updating workflow tasks, and creating notebook entries) and has the ability to write aggregated data to local CSV files.
- Sanitization: The provided examples do not demonstrate sanitization or validation of the input biological data before it is processed by the SDK or written to files.
Audit Metadata