benchling-integration
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing the benchling-sdk package (SKILL.md), which is the official library provided by Benchling for Python integrations.
- [SAFE]: The skill demonstrates secure credential handling by using os.environ to access API keys and client secrets (SKILL.md), which aligns with industry best practices for secret management.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for untrusted data, though the risk is low due to the structured nature of the operations: 1. Ingestion points: Biological sequence data is read from external FASTA files (SKILL.md) and retrieved from the Benchling registry via the SDK. 2. Boundary markers: The skill does not explicitly use delimiters or instruction-bypass warnings when processing these records. 3. Capability inventory: The skill's capabilities are restricted to Benchling API interactions and local file system writes for CSV reports (SKILL.md). 4. Sanitization: The skill does not perform specific sanitization of ingested sequence data before it is sent to the Benchling platform.
Audit Metadata