pathogen-variant-surveillance
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches nomenclature and lineage data from the public
cov-lineages/pango-designationGitHub repository and genomic surveillance data from GenSpectrum LAPIS API instances. These are established scientific data sources. - [DATA_EXFILTRATION]: Performs outgoing network requests to specific scientific research API hosts (
lapis.cov-spectrum.org,lapis.genspectrum.org,lapis.pathoplexus.org) and GitHub. No access to sensitive local files, credentials, or unauthorized domains was detected. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external APIs. It implements a
sanitizefunction inlapis_client.pythat removes control characters and collapses whitespace in strings received from remote sources before they are presented to the agent, effectively mitigating potential injection or structural forgery attacks.
Audit Metadata