chembl-database
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the chembl_webresource_client Python package, which is the official client for accessing the ChEMBL database maintained by the European Bioinformatics Institute (EBI).
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves biological data from the external ChEMBL API, creating a surface for potential indirect prompt injection through molecular metadata or assay descriptions.
- Ingestion points: Compound structures, target descriptions, and bioactivity measurements retrieved from ebi.ac.uk in SKILL.md and scripts/example_queries.py.
- Boundary markers: None present in the provided instructions or code samples.
- Capability inventory: The chembl_webresource_client performs network operations to EBI domains and maintains a local cache of query results on the filesystem.
- Sanitization: No explicit sanitization or validation of the API-returned strings is implemented before processing.
Audit Metadata