gene-database
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a legitimate toolset for bioinformatics, enabling users to interact with well-known NCBI (National Center for Biotechnology Information) APIs for gene data analysis.
- [DATA_EXFILTRATION]: The skill performs network operations to official NCBI domains (
eutils.ncbi.nlm.nih.govandapi.ncbi.nlm.nih.gov). These operations are used exclusively for retrieving genetic information and metadata, which is the primary function of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface for indirect prompt injection due to its role in processing external data from scientific databases and local user files.
- Ingestion points:
scripts/batch_gene_lookup.pyreads data from local files via the--fileargument, and all query scripts ingest data from NCBI API responses. - Boundary markers: None identified in the script outputs.
- Capability inventory: The skill can perform network requests using
urllib.requestand write query results to local files. - Sanitization: The scripts use
urllib.parse.urlencodeto ensure search parameters are correctly formatted for API requests.
Audit Metadata