tooluniverse-chemical-sourcing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from multiple external scientific and vendor databases (PubChem, ChEMBL, ZINC, Enamine, eMolecules, Mcule). This creates an attack surface where maliciously crafted metadata or descriptions within these external records could attempt to influence the agent's behavior.
- Ingestion points: Outputs from tools like
PubChem_get_compound_properties_by_CID,ZINC_search_compounds, andEnamine_search_catalog. - Boundary markers: No specific delimiters or "ignore instructions" markers are defined for handling the external database content.
- Capability inventory: The agent is instructed to execute Bash commands and Python scripts for data analysis.
- Sanitization: There is no mention of sanitization or validation of the data retrieved from external sources before it is processed.
- [DYNAMIC_EXECUTION]: The skill explicitly instructs the agent to perform analysis by writing and running Python code via Bash. While this is intended for legitimate data processing using standard libraries (pandas, scipy, etc.), it involves the runtime generation and execution of code based on information retrieved from the web.
Audit Metadata