gget
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes biological data, such as FASTA files and gene lists, as well as API responses from external bioinformatics databases. This represents an attack surface for indirect prompt injection where malicious instructions could be theoretically embedded in the biological data, though this is a common characteristic of tools designed to process external scientific data.\n
- Ingestion points: The scripts
scripts/batch_sequence_analysis.pyandscripts/enrichment_pipeline.pyread local FASTA and CSV files, while modules likegget.blastandgget.infofetch data from remote genomic APIs.\n - Boundary markers: No explicit boundary markers or model instructions to ignore embedded content were identified in the provided Python scripts.\n
- Capability inventory: The skill has the capability to write to the local file system (CSV, FASTA, PDB files), perform network queries to scientific databases, and execute setup tasks for scientific modules.\n
- Sanitization: Standard parsing is used for biological data formats (FASTA, CSV) with basic error handling, but no specific security-focused sanitization of biological sequences is implemented.\n- [EXTERNAL_DOWNLOADS]: The skill fetches genomic reference data, protein structures, and model parameters from established scientific organizations and well-known services, including Ensembl, UniProt, and RCSB PDB.\n
- Evidence: The
gget refmodule downloads genome annotations via FTP from Ensembl, andgget setup alphafolddownloads approximately 4GB of model parameters from the AlphaFold project. These downloads are standard and necessary for the skill's primary scientific functions.\n- [COMMAND_EXECUTION]: The skill uses shell commands for installation and setup of scientific dependencies.\n - Evidence: The installation instructions utilize
uv pip installfor the gget package. Additionally, thegget setupcommand invokes package managers to install module-specific dependencies like AlphaFold models and the ELM database at the user's request.
Audit Metadata