biopython
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external biological data (e.g., parsing FASTA, GenBank, BLAST results) and uses this data to search databases or run local tools. This represents a potential indirect prompt injection surface.
- Ingestion points: Data ingestion occurs through various Biopython parsers such as Bio.SeqIO.parse (SKILL.md), Bio.Entrez.read (references/databases.md), and Bio.PDB.PDBParser (references/structure.md).
- Boundary markers: The skill does not implement specific boundary markers or 'ignore' instructions when interpolating sequence data or database results into downstream functions.
- Capability inventory: The skill possesses the capability to execute shell commands via bioinformatics tool wrappers (e.g., NcbiblastnCommandline in references/blast.md) and perform network requests to NCBI services (references/databases.md).
- Sanitization: No explicit sanitization or filtering of input data is documented before its use in tools or network requests.
- [SAFE]: The skill fetches biological data and publication records from NCBI's well-known scientific databases (ncbi.nlm.nih.gov) through the Entrez and BLAST APIs.
Audit Metadata