etetoolkit
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the ETE3 toolkit and its associated GUI dependencies from standard registries (PyPI, Homebrew, APT). It also uses the ETE3 NCBITaxa module which downloads taxonomy data from the official National Center for Biotechnology Information (NCBI) servers. These are well-known and trusted scientific resources.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external biological data files such as Newick trees and FASTA alignments. While this presents a potential surface for indirect prompt injection through malicious node names or sequence metadata, it is a standard part of phylogenetic workflows and handled via standard library parsing.
- [COMMAND_EXECUTION]: The provided scripts (
tree_operations.pyandquick_visualize.py) implement command-line interfaces for tree processing. The operations performed are restricted to tree structure manipulation and rendering, using standard Python libraries and the ETE3 framework without exposing unsafe command execution pathways.
Audit Metadata