reactome-database
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing the
reactome2pylibrary, which is the official Python client provided by the Reactome organization. - [COMMAND_EXECUTION]: The helper script
scripts/reactome_query.pyexecutes shell-based commands to interact with the Reactome API and manages local file operations to save analysis results. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests untrusted data from user-provided gene lists and expression files.
- Ingestion points: The
scripts/reactome_query.pyscript andSKILL.mdexamples read external files (e.g.,gene_list.txt,expression_data.tsv) to process biological data. - Boundary markers: No specific delimiters or safety instructions are used when interpolating file content into API requests.
- Capability inventory: The skill utilizes network capabilities via the
requestslibrary to communicate withreactome.organd performs file system writes to store analysis output. - Sanitization: Input data is processed as raw identifiers without specific sanitization before being transmitted to the external API.
Audit Metadata