scikit-bio
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches metadata from arXiv (arxiv.org), which is a well-known scientific repository used for research and academic citations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes biological data files (e.g., FASTA, FASTQ, BIOM), which serves as an ingestion point for external data. While no specific vulnerabilities were observed, this capability represents an attack surface where malicious instructions could potentially be embedded in biological datasets.
- Ingestion points: Biological file formats handled in
SKILL.md(Sequence Manipulation, File I/O) andapi_reference.md(File I/O). - Boundary markers: None identified in the provided documentation.
- Capability inventory: The skill uses
Read,Write,Edit, andBashtools as specified in theSKILL.mdfrontmatter. - Sanitization: Standard biological format parsing is performed by the scikit-bio library; no additional prompt-level sanitization is described.
Audit Metadata