tooluniverse-binder-discovery

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Retrieves protein sequences, ligands, and bioactivity data from well-known scientific repositories including UniProt, ChEMBL, PubChem, and the Protein Data Bank (PDB). These sources are recognized scientific services.\n- [EXTERNAL_DOWNLOADS]: Utilizes NVIDIA NIM APIs to perform remote structure prediction and molecular docking using models like AlphaFold2 and DiffDock. These are established AI services for life sciences research.\n- [DATA_EXFILTRATION]: The skill performs research-related queries to external bioinformatics APIs; this data transmission is necessary for the discovery workflow and is restricted to relevant scientific data points.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from external sources such as PubMed and preprint servers (BioRxiv/MedRxiv).\n
  • Ingestion points: Data retrieved from scientific literature searches and preprint metadata via tool calls.\n
  • Boundary markers: The instructions do not define specific delimiters to isolate external text from agent instructions.\n
  • Capability inventory: The agent possesses file-writing and tool-invocation capabilities that could be influenced by instructions embedded in literature abstracts.\n
  • Sanitization: No explicit filtering or sanitization of external textual content was identified.\n- [SAFE]: Demonstrates secure handling of credentials by utilizing environment variables for the NVIDIA_API_KEY rather than hardcoding secrets.\n- [COMMAND_EXECUTION]: All bioinformatics tasks are performed via specific tool calls; no arbitrary shell access or administrative command execution is requested.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 03:10 AM