scikit-bio
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and processing of untrusted external biological data files, which is an attack surface for indirect prompt injection.
- Ingestion points: Data is ingested from external files using methods such as
skbio.io.read,TreeNode.read, andTable.read(as seen inSKILL.mdandreferences/extended_api.md). - Boundary markers: The instructions do not specify any boundary markers or delimiters to protect the agent from potentially malicious instructions embedded within the processed biological data.
- Capability inventory: The skill includes capabilities for reading and writing files to the file system and performing complex multivariate statistical analysis.
- Sanitization: The underlying scikit-bio library provides implicit sanitization through structural validation of biological sequences (DNA, RNA, Protein) and specialized data structures.
Audit Metadata