tooluniverse-glycobiology
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and reference materials found no malicious patterns, prompt injections, or unauthorized data access behaviors. The skill uses standard scientific identifiers and references trusted databases such as GlyGen, PubChem, and UniProt.
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection through its ingestion of external biological data from the GlyGen API. 1. Ingestion points: Data is retrieved via five retrieval tools (GlyGen_get_glycan, GlyGen_search_glycans, GlyGen_get_glycoprotein, GlyGen_search_glycoproteins, and GlyGen_get_site). 2. Boundary markers: No specific delimiters are used to separate API data from instructions. 3. Capability inventory: The skill is restricted to information retrieval and lacks capabilities for file system modification, shell execution, or unauthorized network communication. 4. Sanitization: No explicit sanitization of API responses is mentioned. The lack of dangerous capabilities mitigates the risk from this ingestion surface to a safe level.
Audit Metadata