benchling-integration
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Benchling tenants which could contain malicious instructions designed to influence the agent.
- Ingestion points: Data is retrieved from Benchling registry entities, notebook entries, and event payloads via the Python SDK and REST API as described in
references/core_capabilities.mdandreferences/api_endpoints.md. - Boundary markers: The implementation snippets do not demonstrate the use of boundary markers or instructions to ignore embedded commands in the retrieved data.
- Capability inventory: The skill is granted
allowed-tools: Read Write Edit Bash, and Python examples demonstrate file writing and network operations as shown inSKILL.mdandreferences/core_capabilities.md. - Sanitization: No explicit sanitization or content validation of Benchling API responses is evidenced in the skill's reference code.
Audit Metadata