pathogen-variant-surveillance

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches viral nomenclature files from the official Pango designation repository on GitHub and queries genomic data from GenSpectrum and Pathoplexus API instances. These are established, well-known resources in the scientific community.
  • [COMMAND_EXECUTION]: The provided Python scripts allow the agent to perform data analysis tasks. These scripts rely exclusively on the Python standard library and contain no third-party dependencies or unsafe execution patterns.
  • [DATA_EXFILTRATION]: API queries are limited to biological research parameters. No evidence was found of the skill accessing or exfiltrating sensitive local data such as credentials or configuration files.
  • [PROMPT_INJECTION]: The skill uses instructional constraints to ensure the agent uses live data for accuracy, rather than relying on its internal training data. No malicious override attempts were identified.
  • [SAFE]: The skill implements a sanitization routine to strip control characters from remote data before displaying it to the agent, effectively mitigating risks associated with malformed or malicious API responses.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 12:42 AM
Security Audit — agent-trust-hub — pathogen-variant-surveillance