lamindb
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs pinned Python packages such as 'lamindb==2.5.1' and 'bionty==2.4.0' using the 'uv' package manager. It also fetches biological ontologies through the Bionty plugin, which is a standard functional requirement for biological data curation.
- [COMMAND_EXECUTION]: It utilizes the 'lamin' CLI for instance initialization, authentication, and database management, which are routine administrative operations for the platform.
- [DATA_EXFILTRATION]: The skill includes explicit security guidelines for the agent to avoid displaying API keys or cloud credentials, recommending the use of named environment variables and secret managers instead.
- [PROMPT_INJECTION]: The skill describes workflows for processing external data from APIs and databases. It mitigates indirect prompt injection risks by mandating strict schema validation and curation processes for all ingested content.
Audit Metadata