drug-bioactivity-assay
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/get_assays.pydownloads biological assay data from the official PubChem (NCBI) PUG REST API. This is a well-known and trusted scientific resource. - [COMMAND_EXECUTION]: The skill instructions provide commands to run a local Python script using standard argument parsing. No risky shell execution or command injection vulnerabilities were found.
- [DATA_EXFILTRATION]: The skill retrieves public data and does not access or transmit sensitive local information such as credentials or private configuration files.
- [SAFE]: Evaluation of the indirect prompt injection surface (Category 8) identifies that external data enters the environment through the PubChem API. No explicit boundary markers are present in the script, and its primary capability is writing local JSON files. Data is sanitized by the
json.dumpprocess, and the source is highly trusted, resulting in a safe verdict for this category.
Audit Metadata