bio-epidemiological-genomics-amr-surveillance

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Python's subprocess module to run external bioinformatics tools such as amrfinder. This implementation follows security best practices by passing arguments as a list rather than using a shell, which prevents common command injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill documents the installation of necessary dependencies through standard package managers (conda) and updates biological databases from official sources (NCBI). These are standard and expected operations for bioinformatics software.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No evidence of hardcoded credentials, access to sensitive system files, or unauthorized network operations was found. Data processing is performed locally on the user's genomic files.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes external genomic and tabular data, it does so for analytical purposes with no autonomous decision-making or command generation based on the data content that could lead to exploitation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 07:22 AM