geo-database
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill retrieves and processes metadata from the NCBI GEO database, including study summaries and sample titles authored by third-party researchers. This untrusted data enters the agent context through 'GEOparse' and 'Bio.Entrez' calls in 'SKILL.md'. Since this metadata is processed by the agent without explicit boundary markers or sanitization, it creates a surface for indirect prompt injection. A malicious actor could submit a dataset to GEO with instructions embedded in the description to manipulate the agent's logic. The skill has capabilities for network access and shell command execution, which could be exploited if an injection is successful.
- [COMMAND_EXECUTION]: The skill uses the 'uv pip' command to install necessary scientific libraries and 'wget' to download datasets from the NCBI FTP server.
- [EXTERNAL_DOWNLOADS]: Fetches genomic data files and metadata from official NCBI (National Center for Biotechnology Information) domains including 'ftp.ncbi.nlm.nih.gov' and 'eutils.ncbi.nlm.nih.gov' using 'ftplib', 'wget', and the 'GEOparse' library.
Audit Metadata