bio-alignment-io
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The usage guide specifies the installation of the 'biopython' library from PyPI, which is the official and trusted repository for Python packages. Biopython is the industry-standard library for biological computation.
- [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface as it processes external, potentially untrusted alignment files. * Ingestion points: The skill uses
Bio.AlignIO.readandBio.AlignIO.parsein multiple scripts (e.g.,examples/read_alignment.py,examples/convert_formats.py) to ingest data from .aln, .phy, and other biological formats. * Boundary markers: The current implementation lacks explicit delimiters or instructions to the agent to ignore potential commands embedded in sequence metadata or identifiers. * Capability inventory: The skill's capabilities are limited to standard file system operations (reading/writing biological files) and console output, with no network or system-level administrative access. * Sanitization: Data is structured according to strict biological format specifications and handled by the Biopython parsing engine. - [SAFE]: All included scripts and examples perform intended biological data processing tasks without any signs of data exfiltration, credential harvesting, obfuscation, or unauthorized command execution. The skill is consistent with its stated purpose.
Audit Metadata