ontology-term-resolution
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to well-known scientific and academic service providers.\n
- Targeted domains include
ebi.ac.uk(European Bioinformatics Institute),bioregistry.io,identifiers.org, andontobee.org.\n - These requests are used to query biological ontology data and are handled via the standard library
urllib.requestmodule.\n - The domains are established research infrastructures and are treated as trusted sources for scientific metadata.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and processing of external data, creating a surface for indirect prompt injection.\n
- Ingestion points:
resolve_terms.py,map_terms.py, andvalidate_terms.pyread user-provided labels and CURIEs from CLI arguments or files, and ingest JSON data from the OLS, Bioregistry, and ZOOMA APIs.\n - Boundary markers: The instructions in
SKILL.mdandreferences/curation-rules.mdexplicitly direct the agent to validate all candidates and check primary labels/definitions before accepting any term, mitigating the risk of following malicious instructions embedded in data.\n - Capability inventory: The skill is capable of network GET requests and writing data to files via standard Python file I/O. It does not contain capabilities for dynamic code execution (
eval,exec) or system command invocation.\n - Sanitization: Input labels are normalized (case-folding and whitespace handling), and all dynamic API query parameters are URL-encoded. Output is consistently formatted as TSV or JSON.
Audit Metadata