clinvar-database
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading genomic datasets and configuration files from official NCBI servers at ncbi.nlm.nih.gov.
- [REMOTE_CODE_EXECUTION]: Includes instructions for installing Entrez Direct utilities using a piped shell script fetched from the official NCBI FTP repository. This targets a well-known scientific service.
- [INDIRECT_PROMPT_INJECTION]: Accesses and processes external clinical variant data from the ClinVar database via E-utilities API and FTP. While it processes untrusted data using capabilities like curl and Python, the source is a curated repository and no boundary markers or sanitization logic are explicitly required for the provided educational examples.
- [CREDENTIALS_UNSAFE]: Provides guidance on using API keys to improve request rate limits, utilizing standard placeholders for user-provided credentials without hardcoding any secrets.
Audit Metadata