glycoengineering
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes protein sequences which represent a potential surface for indirect prompt injection if malicious instructions are embedded in the sequence strings and subsequently interpreted by an LLM.
- Ingestion points: The
sequenceparameter infind_n_glycosylation_sequons(SKILL.md) and batch analysis functions inreferences/glycan_databases.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat sequence data as non-executable text.
- Capability inventory: The skill utilizes
requests.getfor network operations and provides shell commands for package installation. - Sanitization: Input sequences are converted to uppercase and validated against biological motifs (N-X-[S/T]), which naturally restricts the character set but does not provide formal instruction filtering.
- [EXTERNAL_DOWNLOADS]: The skill references and fetches data from well-known scientific and academic repositories.
- Fetches protein-glycan profiles from
glyconnect.expasy.org(Swiss Institute of Bioinformatics). - Retrieves glycan metadata from the
api.glytoucan.orgrepository. - Points users to prediction services at
services.healthtech.dtu.dk. - [COMMAND_EXECUTION]: Provides a command to install the
glycoshieldPython package viapipto enable glycan shielding analysis functionality.
Audit Metadata