benchling-integration

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the official benchling-sdk package and references other standard libraries such as biopython (for biological sequence handling), python-dotenv (for environment variable management), and httpx (for custom HTTP client configurations). All referenced packages are well-known and appropriate for the skill's stated purpose.
  • [CREDENTIALS_UNSAFE]: The code examples in SKILL.md and reference files use clear placeholders (e.g., 'your_api_key', 'your_client_id') for authentication. The skill includes a dedicated authentication reference file (references/authentication.md) that explicitly warns against hardcoding credentials and provides best practices for using environment variables and secret management services.
  • [DATA_EXFILTRATION]: While the skill involves network operations and data transfer, all activities are directed towards official Benchling API endpoints (api.v2 on the user's tenant). There are no indications of unauthorized data collection or exfiltration to third-party domains.
  • [METADATA_POISONING]: The skill metadata identifies the author as 'K-Dense Inc.', which differs from the provided context author 'eturkes'. This appears to be a descriptive discrepancy in the documentation rather than a malicious attempt to deceive or hide intent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 10:49 PM