biopython-sequence-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads biological sequence data from the National Center for Biotechnology Information (NCBI) using the
Bio.EntrezandBio.Blast.NCBIWWWmodules. This is a standard and expected functionality for bioinformatics tools fetching data from public repositories. - [COMMAND_EXECUTION]: The skill uses
subprocess.run()to invoke local bioinformatics command-line utilities includingmakeblastdb,blastp, andmuscle. These calls are used for their intended purpose of sequence alignment and similarity searching. - [CREDENTIALS_SAFE]: The skill correctly instructs users to provide their own NCBI email and API key via placeholders (e.g.,
your.email@example.com,YOUR_API_KEY) and does not contain hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses external biological data files (FASTA, FASTQ, GenBank, GFF3). While this represents a theoretical attack surface where malicious strings could be embedded in sequence comments, the data is processed by the Biopython library for scientific analysis and is not directly interpreted as instructions for the agent.
Audit Metadata