gene-database
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with the National Center for Biotechnology Information (NCBI) using official API endpoints (
eutils.ncbi.nlm.nih.govandapi.ncbi.nlm.nih.gov). These are well-known, trusted scientific resources. - [SAFE]: The Python scripts (
query_gene.py,fetch_gene_data.py,batch_gene_lookup.py) use standard libraries such asurllib.requestand implement appropriate rate-limiting delays to comply with API usage policies. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external source (NCBI), which could theoretically contain instructions intended to influence the agent. However, given the source is a curated scientific database, this represents a standard informational surface with no specific risk detected.
- Ingestion points: Data enters the agent's context through the output of scripts that query NCBI Gene metadata and descriptions.
- Boundary markers: None; script outputs are provided as structured JSON or human-readable text without explicit delimiters.
- Capability inventory: The skill is limited to making network requests to NCBI and reading local files; it has no capabilities for shell execution, local file modification, or credential exfiltration.
- Sanitization: Search queries are properly handled using
urllib.parse.urlencodeto ensure safe transmission of parameters to the remote API.
Audit Metadata