onekgpd
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the
dnaerysPython package inscripts/onekgpd_api.py. This package is installed into an ephemeral environment viauvto support communication with the genomic data endpoint. - [COMMAND_EXECUTION]: The skill executes Python scripts (
onekgpd_api.pyandonekgpd_meta.py) to handle genomic data processing. These scripts perform authorized network requests and write temporary JSON results to the system's temporary directory for further analysis by the agent. - [DATA_EXFILTRATION]: The skill initiates outbound network connections to
db.dnaerys.org:443. These connections are used to transmit user-specified genomic coordinates and retrieve cohort data; no sensitive local files or user credentials are accessed or transmitted. - [SAFE]: Indirect Prompt Injection surface analysis:
- Ingestion points: Genomic variant and sample data retrieved from the remote API in
scripts/onekgpd_api.pyand local metadata fromassets/kgpe.json. - Boundary markers: External data is stored in structured JSON format with distinct field names.
- Capability inventory: Subprocess execution for data filtering (bash/jq) and file system writes for results storage.
- Sanitization: The skill uses standard JSON serialization and provides concise human-readable summaries to prevent raw data from overwhelming the context.
Audit Metadata