gene-database

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a legitimate toolset for bioinformatics, enabling users to interact with well-known NCBI (National Center for Biotechnology Information) APIs for gene data analysis.
  • [DATA_EXFILTRATION]: The skill performs network operations to official NCBI domains (eutils.ncbi.nlm.nih.gov and api.ncbi.nlm.nih.gov). These operations are used exclusively for retrieving genetic information and metadata, which is the primary function of the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface for indirect prompt injection due to its role in processing external data from scientific databases and local user files.
  • Ingestion points: scripts/batch_gene_lookup.py reads data from local files via the --file argument, and all query scripts ingest data from NCBI API responses.
  • Boundary markers: None identified in the script outputs.
  • Capability inventory: The skill can perform network requests using urllib.request and write query results to local files.
  • Sanitization: The scripts use urllib.parse.urlencode to ensure search parameters are correctly formatted for API requests.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:40 PM