alphagenome
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches reference genomic annotation data (GENCODE v46) from official Google Cloud Storage buckets at
storage.googleapis.com. - [COMMAND_EXECUTION]: The skill provides CLI scripts that execute Python code to perform genomic coordinate transformations, query the AlphaGenome API via gRPC, and generate formatted output files.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied genomic data from VCF and TSV files, which creates an ingestion surface for untrusted data.
- Ingestion points: Data is loaded through the
read_vcfandread_variant_tablefunctions inscripts/_common.py. - Boundary markers: The implementation utilizes strict regular expression patterns (
_VARIANT_PATTERNS) to validate and normalize variant strings. - Capability inventory: The skill possesses capabilities for network communication with
gdmscience.googleapis.comand local file system writes for result persistence. - Sanitization: Inputs are parsed into structured
VariantSpecobjects, ensuring that only valid genomic coordinates and alleles are processed by the model API.
Audit Metadata