biopython
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and numerous code examples for executing external bioinformatics command-line tools via the Python
subprocessmodule. - Specific examples include the execution of
clustalo,muscle,blastn,makeblastdb, anddsspusing explicit argument lists. - These operations depend on standard bioinformatics binaries typically managed separately in a research environment.
- [EXTERNAL_DOWNLOADS]: The skill documentation describes and facilitates the programmatic retrieval of data from external biological repositories.
- It utilizes
Bio.Entrezto search and download records from NCBI (National Center for Biotechnology Information) databases, including PubMed, GenBank, and Protein. - It uses
Bio.Blast.NCBIWWWto transmit sequence data to NCBI servers for remote BLAST analysis. - It uses
Bio.PDB.PDBListto fetch macromolecular structure files from the Protein Data Bank (PDB). - These network operations target established scientific and governmental infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process a variety of biological data formats (such as FASTA, GenBank, XML, and PDB) which may be sourced from external, untrusted providers.
- Ingestion points: Data enters the context through
Bio.SeqIO.parse,Bio.Entrez.read,Bio.Blast.NCBIXML.read, and structural parsers likePDBParserandMMCIFParser. - Capability inventory: The skill has access to the
Bashtool and usessubprocess.runto interact with the local operating system. - Sanitization: The skill documentation proactively recommends using Biopython version 1.87 or later to address CVE-2025-68463, a vulnerability related to parsing untrusted Entrez XML files.
- Boundary markers: The provided examples do not implement specific boundary markers or instructions to the agent to disregard natural language commands that might be embedded within biological sequence comments or metadata fields.
Audit Metadata