clinvar-database
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of Entrez Direct command-line tools using a script retrieved from the official NCBI FTP server (ftp.ncbi.nlm.nih.gov).
- [EXTERNAL_DOWNLOADS]: The skill retrieves genomic variant data and clinical summaries from NCBI's public API (eutils.ncbi.nlm.nih.gov) and FTP services.
- [COMMAND_EXECUTION]: The skill provides examples of shell commands using bcftools, curl, wget, and standard Unix utilities for filtering and processing genomic information.
- [INDIRECT_PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection as it ingests clinical variant data from external databases. Ingestion points: NCBI ClinVar API and FTP site (eutils.ncbi.nlm.nih.gov, ftp.ncbi.nlm.nih.gov). Boundary markers: The skill does not explicitly define markers or delimiters for the ingested data in its examples. Capability inventory: Uses command-line tools and Python libraries for file processing and data extraction. Sanitization: No specialized sanitization for the scientific data content is described.
Audit Metadata