adaptyv
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
adaptyv-sdkpackage directly from a remote GitHub repository (https://github.com/adaptyvbio/adaptyv-sdk.git) using theuvpackage manager. - [REMOTE_CODE_EXECUTION]: Installation and subsequent import of the
adaptyv-sdkfrom a remote repository involves the execution of code provided by that source during both setup and runtime. - [INDIRECT_PROMPT_INJECTION]: The skill processes experimental data and target information retrieved from the Adaptyv Bio API, which introduces a potential attack surface for indirect prompt injection if the API responses were to contain maliciously crafted instructions.
- Ingestion points: Data retrieved from endpoints such as
GET /experiments/{experiment_id}/resultsandGET /targets(referenced inreferences/api-endpoints.md). - Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" wrappers for data returned from the API.
- Capability inventory: The skill utilizes the
adaptyvPython SDK and shell commands (curl,uv,export) to manage laboratory experiments as described inSKILL.md. - Sanitization: The skill includes a high-level instruction to "sanitize molecules before computing" under the Agent operating procedure in
SKILL.md.
Audit Metadata