tamarind
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates interaction with the Tamarind Bio platform for molecular design and structural biology tasks. The instructions and code samples are consistent with the primary scientific purpose, targeting official service domains (app.tamarind.bio, docs.tamarind.bio, and mcp.tamarind.bio).
- [CREDENTIALS_SAFE]: The skill implements secure authentication practices by sourcing the API key from the
TAMARIND_API_KEYenvironment variable. It includes explicit warnings against hardcoding secrets in files or logs and specifies that keys should not be sent when accessing signed storage URLs. - [EXTERNAL_DOWNLOADS]: The skill provides mechanisms to download scientific results and logs using signed URLs generated by the service. These operations are standard for the tool's functionality and include proper error handling and timeout configurations.
- [COMMAND_EXECUTION]: The provided documentation includes
curlcommands for discovery and binary file uploads. These commands are illustrative and intended for legitimate interaction with the API, involving no unauthorized system modifications or persistence mechanisms. - [INDIRECT_PROMPT_INJECTION]: The skill processes external biological data such as protein sequences and structure files. It mitigates potential injection risks by using structured API responses, performing job name sanitization, and employing a dedicated validation endpoint (
/validate-job) to normalize settings before submission.
Audit Metadata