drugbank-database-access

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the user to download the DrugBank database (~1.5 GB XML) from the official website (go.drugbank.com). It also recommends the drugbank-downloader utility to facilitate this process, which is a standard practice for academic and research workflows.
  • [COMMAND_EXECUTION]: Instructions include standard shell commands for installing reputable Python libraries via pip, such as lxml, pandas, rdkit-pypi, drugbank-downloader, numpy, networkx, and scikit-learn. These tools are necessary for the cheminformatics and data analysis tasks described.
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes an ingestion surface by parsing large, externally-sourced XML files.
  • Ingestion points: drugbank_all_full_database.xml parsed via xml.etree.ElementTree in SKILL.md and referenced files.
  • Boundary markers: None explicitly present in snippets, as the skill assumes structured XML parsing.
  • Capability inventory: Data analysis, console output, and CSV file writing (pd.to_csv).
  • Sanitization: Standard XML parsing logic is used; the risk is mitigated by the fact that the source is a trusted biological database and the execution environment is local to the user's research setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 12:54 AM