latchbio-integration
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the processing of external, untrusted bioinformatics data files through its workflow system. This represents a potential surface for indirect prompt injection where malformed data could attempt to influence the behavior of the analysis tools or the agent's interpretation.
- Ingestion points: Parameters defined as
LatchFileorLatchDirin workflow definitions, such asmy_workflow(input_file: LatchFile)inSKILL.md. - Boundary markers: The instructions do not provide specific boundary markers or warnings to the agent to disregard potential instructions embedded within the processed genomic data.
- Capability inventory: The skill uses
@taskand@workflowdecorators to define and execute serverless code, and supports the registration of Nextflow and Snakemake pipelines. - Sanitization: There is no documentation regarding the sanitization or validation of the internal contents of the genomic files (e.g., FASTQ, BAM) before processing.
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install the
latchpackage from the Python Package Index (PyPI). This is the official SDK for the Latch platform described in the skill.
Audit Metadata