tooluniverse-epigenomics
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements legitimate scientific computing tasks using established libraries such as pandas, numpy, and scipy. The bundled script
scripts/methylation_density.pyand the code snippets inCODE_REFERENCE.mdare focused entirely on statistical genomics analysis. - [SAFE]: No credentials or sensitive data are hardcoded; the skill correctly uses an
.env.templatefile to manage external API keys for biological databases. - [SAFE]: Tool invocations are directed at reputable bioinformatics services (ENCODE, GTEx, Ensembl, etc.) and are consistent with the skill's primary purpose of biological data annotation.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection due to its processing of external datasets. 1. Ingestion points: Data is loaded from methylation CSVs, BED/narrowPeak files, and clinical metadata files in
CODE_REFERENCE.mdandscripts/methylation_density.py. 2. Boundary markers: No explicit prompt boundary markers or sanitization logic for input file content is present. 3. Capability inventory: The skill uses pandas for file I/O and calls external ToolUniverse APIs for gene and experiment annotation. 4. Sanitization: Input data is parsed into structured formats (DataFrames) using standard scientific computing libraries, which provides implicit type validation but no specific prompt injection filtering.
Audit Metadata