bioservices

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill is designed to interact with approximately 40 bioinformatics web services and databases (e.g., UniProt, KEGG, NCBI, ChEBI, ChEMBL) to retrieve biological information. Use of these well-known scientific services is documented as the primary function of the skill.
  • [DATA_EXFILTRATION]: The skill sends user-provided biological identifiers and sequences to external APIs for processing. Notably, the NCBI BLAST service requires a user's email address as a parameter to track job status, which is a standard requirement for that specific service.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from external APIs (such as protein sequences in FASTA format or annotations in XML/JSON) and reads identifiers from local input files. While these are ingestion points for untrusted data, the skill is focused on structured data manipulation for research purposes, involving a negligible risk of malicious influence on the agent's behavior.
  • [COMMAND_EXECUTION]: The skill includes executable Python scripts that perform network requests and file I/O operations (reading ID lists, writing CSV/SIF results). The logic within these scripts is transparent and limited to the stated purpose of bioinformatics data analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 01:29 PM