pride-database
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches proteomics datasets, project metadata, and file manifests from the PRIDE Archive REST API hosted by the European Bioinformatics Institute (EMBL-EBI). All remote references target this well-known scientific organization.
- [COMMAND_EXECUTION]: Provides instructions to install standard, reputable Python packages from public registries:
requests,pandas, andmatplotlib. - [PROMPT_INJECTION]: The skill ingests untrusted data (project titles, descriptions, and metadata) from the PRIDE API. This data is processed and printed without explicit sanitization or boundary markers, creating a surface for indirect prompt injection. However, since the source is a highly regulated and reputable international research organization (EMBL-EBI), the practical risk is minimal.
- Ingestion points: API response parsing in
search_projects,get_project,get_peptides, andget_psmsfunctions withinSKILL.md. - Boundary markers: None present; data is interpolated directly into strings or DataFrames.
- Capability inventory: Local file system writes are used for data exports (
to_csv,savefig,open().write()) in various workflows withinSKILL.md. - Sanitization: No explicit sanitization or validation of the retrieved text data is performed before processing.
Audit Metadata