reactome-database

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing the reactome2py library, which is the official Python client provided by the Reactome organization.
  • [COMMAND_EXECUTION]: The helper script scripts/reactome_query.py executes shell-based commands to interact with the Reactome API and manages local file operations to save analysis results.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests untrusted data from user-provided gene lists and expression files.
  • Ingestion points: The scripts/reactome_query.py script and SKILL.md examples read external files (e.g., gene_list.txt, expression_data.tsv) to process biological data.
  • Boundary markers: No specific delimiters or safety instructions are used when interpolating file content into API requests.
  • Capability inventory: The skill utilizes network capabilities via the requests library to communicate with reactome.org and performs file system writes to store analysis output.
  • Sanitization: Input data is processed as raw identifiers without specific sanitization before being transmitted to the external API.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 12:15 PM