clinpgx-database
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.clinpgx.organdapi.cpicpgx.orgto retrieve pharmacogenomic data and guidelines. These are established resources for bioinformatics data. - [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from external API responses, which presents a surface for indirect prompt injection.
- Ingestion points: Data is retrieved from API endpoints at
api.clinpgx.organdapi.cpicpgx.orgas shown in the Python examples inSKILL.md. - Boundary markers: The implementation examples do not use specific delimiters or instructions to ignore potential commands embedded in the external data.
- Capability inventory: The skill is limited to network reads and data processing using
pandas. No capabilities for file writing, system command execution, or persistence are present. - Sanitization: The skill relies on standard JSON parsing and does not implement additional filtering or escaping for the data strings retrieved from the APIs.
Audit Metadata