benchling-integration
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the official
benchling-sdkpackage and references other standard libraries such asbiopython(for biological sequence handling),python-dotenv(for environment variable management), andhttpx(for custom HTTP client configurations). All referenced packages are well-known and appropriate for the skill's stated purpose. - [CREDENTIALS_UNSAFE]: The code examples in
SKILL.mdand reference files use clear placeholders (e.g., 'your_api_key', 'your_client_id') for authentication. The skill includes a dedicated authentication reference file (references/authentication.md) that explicitly warns against hardcoding credentials and provides best practices for using environment variables and secret management services. - [DATA_EXFILTRATION]: While the skill involves network operations and data transfer, all activities are directed towards official Benchling API endpoints (
api.v2on the user's tenant). There are no indications of unauthorized data collection or exfiltration to third-party domains. - [METADATA_POISONING]: The skill metadata identifies the author as 'K-Dense Inc.', which differs from the provided context author 'eturkes'. This appears to be a descriptive discrepancy in the documentation rather than a malicious attempt to deceive or hide intent.
Audit Metadata