scikit-bio
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include commands to install scikit-bio and its dependencies (numpy, matplotlib, seaborn, plotly, biom-format, polars, anndata) from standard package registries. These are well-known, legitimate biological research tools.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of various biological file formats which may contain untrusted data from external sources.
- Ingestion points: Data is loaded via skbio.DNA.read, Table.read, and TreeNode.read methods as shown in SKILL.md and references/api_reference.md.
- Boundary markers: Absent; the skill lacks explicit delimiters for data content but defines a mandatory 'Agent operating procedure' requiring QC and validation steps.
- Capability inventory: The agent has access to Bash, Read, Write, and Edit tools across its functionality to process and manage biological data.
- Sanitization: Absent; the skill relies on the scikit-bio library's internal validation of biological file formats (FASTA, FASTQ, BIOM, Newick) during parsing.
Audit Metadata