foldseek-structural-search
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill sends data to and fetches results from the Foldseek API at
https://search.foldseek.com. This is the official server for the Foldseek structural search tool, which is a well-known service in the bioinformatics community. - [INDIRECT_PROMPT_INJECTION]: The skill implements a data ingestion pipeline where it reads responses from the Foldseek API and formats them into a Markdown table for the agent to summarize.
- Ingestion points: The
scripts/search.pyscript fetches JSON data fromhttps://search.foldseek.com/api/result/{ticket_id}/0. - Boundary markers: None are present in the script or the instructions to delimit the API data from the agent's instructions.
- Capability inventory: The skill writes a local JSON result file and prints a Markdown table to standard output which is then read by the agent.
- Sanitization: There is no explicit sanitization or filtering of the
Target IDor other metadata fields returned by the API before they are presented to the agent. While this is an inherent risk of processing external data, the source is a reputable scientific API.
Audit Metadata