adaptyv
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install the
adaptyv-sdklibrary directly from a remote GitHub repository (git+https://github.com/adaptyvbio/adaptyv-sdk.git) using theuvpackage manager. This bypasses the integrity checks of standard package registries like PyPI. - [COMMAND_EXECUTION]: The skill provides various shell commands for the agent to execute, including package installation (
uv pip install) and API interactions usingcurl. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing external data which creates a potential surface for indirect prompt injection. Ingestion points: The skill ingests user-provided amino acid sequences and retrieves results from the Adaptyv Bio API. Boundary markers: No specific delimiters or instructions are provided to the agent to treat these external inputs as untrusted data. Capability inventory: The skill utilizes network capabilities to communicate with the
foundry-api-public.adaptyvbio.comdomain. Sanitization: No explicit sanitization, validation, or escaping of biological sequence data or API responses is mentioned. - [NO_CODE]: The skill is comprised entirely of Markdown documentation and does not contain any executable scripts or binary files, which minimizes the risk of direct execution of malicious code.
- [CREDENTIALS_UNSAFE]: The skill follows security best practices by explicitly warning against hardcoding API tokens and instead recommending the use of environment variables and
.envfiles for secure authentication.
Audit Metadata