metabolomics-workbench-database
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Metabolomics Workbench REST API, which is an external data source. This represents a theoretical surface for indirect prompt injection, although the source is a reputable scientific institution.
- Ingestion points: Data is fetched via
requests.getin all query modules (SKILL.md). - Boundary markers: None; the skill parses and prints or saves API responses directly.
- Capability inventory: Includes network requests (
requests), data analysis (pandas), and file system writes (df.to_csv). - Sanitization: Not explicitly implemented; the skill relies on standard data format parsing (JSON and TSV).
- [EXTERNAL_DOWNLOADS]: The skill fetches biological data from
metabolomicsworkbench.org. This is a well-known scientific repository and the downloads are aligned with the skill's primary purpose.
Audit Metadata