clinvar-database
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with official NCBI E-utilities endpoints (eutils.ncbi.nlm.nih.gov) and FTP servers (ftp.ncbi.nlm.nih.gov) to retrieve genetic variant metadata. These resources are well-known government services provided by the National Institutes of Health.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external NCBI sources, creating an ingestion surface.
- Ingestion points: Data is fetched via
requestsandurllibinSKILL.mdfrom external JSON, XML, and TSV sources. - Boundary markers: None identified in the instruction prompts.
- Capability inventory: The skill is limited to printing data and writing to local CSV files using
pandas. It lacks dangerous sinks such as arbitrary command execution, network exfiltration of local secrets, or dynamic code evaluation. - Sanitization: The skill does not explicitly sanitize the external data, but its use of structured parsing (JSON/XML/CSV) and lack of dangerous sinks minimizes risk.
Audit Metadata