adaptyv

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONNO_CODE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install the adaptyv-sdk library directly from a remote GitHub repository (git+https://github.com/adaptyvbio/adaptyv-sdk.git) using the uv package manager. This bypasses the integrity checks of standard package registries like PyPI.
  • [COMMAND_EXECUTION]: The skill provides various shell commands for the agent to execute, including package installation (uv pip install) and API interactions using curl.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing external data which creates a potential surface for indirect prompt injection. Ingestion points: The skill ingests user-provided amino acid sequences and retrieves results from the Adaptyv Bio API. Boundary markers: No specific delimiters or instructions are provided to the agent to treat these external inputs as untrusted data. Capability inventory: The skill utilizes network capabilities to communicate with the foundry-api-public.adaptyvbio.com domain. Sanitization: No explicit sanitization, validation, or escaping of biological sequence data or API responses is mentioned.
  • [NO_CODE]: The skill is comprised entirely of Markdown documentation and does not contain any executable scripts or binary files, which minimizes the risk of direct execution of malicious code.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by explicitly warning against hardcoding API tokens and instead recommending the use of environment variables and .env files for secure authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:13 AM