onekgpd
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the 'dnaerys' Python package (version 0.2.x) from PyPI. This package serves as the official client for interacting with the 1000 Genomes Project query endpoint (db.dnaerys.org). As a project-specific library provided by the skill's maintainers, this represents standard dependency management for the skill's stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from two external sources: a public genomic database API and a local JSON metadata asset ('assets/kgpe.json'). While this constitutes a data ingestion surface, the risk of indirect prompt injection is negligible because the ingested data consists of biological annotations (alleles, frequencies, clinical significance terms, and sample IDs) rather than arbitrary natural language text. Furthermore, the skill's instructions emphasize using structured tools like 'jq' to process results, which helps maintain clear boundaries between data and agent context.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute Python scripts using 'uv run'. This method is used to provision ephemeral environments and manage dependencies securely. No arbitrary shell command execution or unsafe subprocess calls were found in the provided scripts.
Audit Metadata