reactome-database

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the reactome2py package from PyPI, which is the official Python client for the Reactome database.
  • [DATA_EXFILTRATION]: The skill transmits user-provided biological identifiers and expression data to https://reactome.org for processing and analysis. This is the core intended functionality of the skill and targets a well-known scientific service.
  • [COMMAND_EXECUTION]: Includes a helper script scripts/reactome_query.py that facilitates API interactions. It reads user-provided text files and writes analysis results to local JSON files.
  • [PROMPT_INJECTION]: The skill processes data from the Reactome API and local files, which constitutes an indirect prompt injection surface. Given the curated nature of the database, the risk is minimal.
  • Ingestion points: Pathway data from reactome.org API; gene lists from local files (e.g., genes.txt).
  • Boundary markers: Not explicitly defined in the provided examples.
  • Capability inventory: Network access (requests), file read/write, and CLI execution via scripts/reactome_query.py.
  • Sanitization: Standard JSON parsing is used for API responses.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 04:01 AM
Security Audit — agent-trust-hub — reactome-database