The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill suggests the installation of the reactome2py Python package. This is a legitimate client library for the Reactome database, and the reference is consistent with the skill's stated purpose.
[COMMAND_EXECUTION]: The helper script scripts/reactome_query.py performs standard HTTP requests and file system operations (reading gene lists and writing JSON results). These operations are necessary for the skill's primary function of biological data analysis.
[DATA_EXFILTRATION]: The skill transmits user-provided gene lists to the reactome.org Analysis Service. As Reactome is a well-known and trusted scientific service, and this transfer is the core functionality of the tool, it does not constitute malicious exfiltration.
[INDIRECT_PROMPT_INJECTION]: The skill ingest data from external sources.
Ingestion points: Data is ingested from the Reactome REST API and local user-provided gene list files in scripts/reactome_query.py.
Boundary markers: None present; the skill processes API responses as trusted structured data.
Capability inventory: The skill uses the requests library for network access and writes results to the local file system.
Sanitization: The skill does not explicitly sanitize the external API responses before processing or displaying them, which is a common surface for indirect injection, though the risk is low given the specialized nature of the data.

reactome-database