archs4-database
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from an external API and binary HDF5 files, which could potentially contain malicious instructions intended for the agent.
- Ingestion points: Remote JSON responses from
maayanlab.cloud(Query 1-4) and bulk genomic data from HDF5 files (Query 6). - Boundary markers: Absent; the skill does not use specific delimiters or instructions to prevent the agent from interpreting ingested data as commands.
- Capability inventory: The skill performs network operations via
requests.getand writes local files usingpandas.to_csvacross various queries inSKILL.md. - Sanitization: Only basic JSON parsing and HTTP status code validation are performed; no sanitization exists for the content of the expression data or metadata.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download large genomic data matrices (HDF5 format) from an external server.
- Evidence: Fetches data from
https://maayanlab.cloud/archs4/api/v1and provides URLs for bulk files likehttps://maayanlab.cloud/archs4/files/human_gene_v2.6.h5. These sources belong to the Ma'ayan Lab (Mount Sinai), a recognized scientific research organization.
Audit Metadata