onekgpd

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the dnaerys Python package in scripts/onekgpd_api.py. This package is installed into an ephemeral environment via uv to support communication with the genomic data endpoint.
  • [COMMAND_EXECUTION]: The skill executes Python scripts (onekgpd_api.py and onekgpd_meta.py) to handle genomic data processing. These scripts perform authorized network requests and write temporary JSON results to the system's temporary directory for further analysis by the agent.
  • [DATA_EXFILTRATION]: The skill initiates outbound network connections to db.dnaerys.org:443. These connections are used to transmit user-specified genomic coordinates and retrieve cohort data; no sensitive local files or user credentials are accessed or transmitted.
  • [SAFE]: Indirect Prompt Injection surface analysis:
  • Ingestion points: Genomic variant and sample data retrieved from the remote API in scripts/onekgpd_api.py and local metadata from assets/kgpe.json.
  • Boundary markers: External data is stored in structured JSON format with distinct field names.
  • Capability inventory: Subprocess execution for data filtering (bash/jq) and file system writes for results storage.
  • Sanitization: The skill uses standard JSON serialization and provides concise human-readable summaries to prevent raw data from overwhelming the context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 02:44 AM
Security Audit — agent-trust-hub — onekgpd