tooluniverse-ecology-biodiversity
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from external scientific databases and literature sources, which presents an attack surface for indirect prompt injection if those sources contain malicious instructions.
- Ingestion points: Data is retrieved from external services including GBIF, PubMed, EuropePMC, BOLDSystems, iDigBio, and WoRMS through various search tools (e.g.,
PubMed_search_articles,GBIF_search_species). - Boundary markers: The instructions do not explicitly define boundary markers or delimiters to separate untrusted external data from the agent's instructions during processing.
- Capability inventory: The skill explicitly instructs the agent to write and execute Python code via Bash for data analysis, utilizing libraries such as
pandas,scipy,statsmodels, andmatplotlib. - Sanitization: No explicit sanitization or validation steps for the external data are mentioned before interpolation into analysis scripts or prompts.
Audit Metadata