etetoolkit
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The NCBITaxa module automatically fetches taxonomic data from the NCBI servers (a well-known scientific service provider). This data is cached locally in the user's home directory to facilitate offline analysis.
- [COMMAND_EXECUTION]: The documentation provides standard installation instructions involving system package managers (apt-get, brew) for required graphical dependencies.
- [DYNAMIC_EXECUTION]: The toolkit uses cpickle for efficient internal object duplication. While this is a standard feature of the underlying ETE3 library, users should be aware of the security implications of pickle when dealing with untrusted serialized objects.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process biological data in formats like Newick and NHX. This inherent capability creates a surface for indirect prompt injection if malicious data files are provided to the agent. Ingestion points: Reads phylogenetic tree data from external files (Newick, NHX, etc.) in SKILL.md and workflows.md. Boundary markers: No delimiters or ignore instructions specified. Capability inventory: File system write access for rendering results (PDF, PNG, SVG) and executing helper scripts. Sanitization: Standard library parsing only.
- [METADATA_POISONING]: There is a discrepancy between the author identified in the skill's metadata (K-Dense Inc.) and the author context provided (eturkes), which may be indicative of template usage or branding differences.
Audit Metadata