tooluniverse-model-organism-genetics
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves biological and genetic data from numerous external sources, including MGI, ZFIN, FlyBase, WormBase, SGD, RGD, GBIF, Ensembl, and NCBI. This external data is brought into the agent's context for processing and analysis.
- Ingestion points: Multiple tools fetch unstructured and semi-structured data from external repositories (e.g.,
MGI_get_gene,FlyBase_get_gene,NCBIDatasets_get_orthologs). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands within retrieved data are provided in the skill instructions.
- Capability inventory: The skill possesses the capability to execute shell commands and run Python scripts to process retrieved data.
- Sanitization: There is no evidence of data sanitization before processing retrieved field values in generated code.
- [DYNAMIC_EXECUTION]: The skill is instructed to write and execute Python code at runtime using the
Bashtool to perform statistical analysis and data visualization (e.g., usingpandas,scipy). This dynamically generated code incorporates data retrieved from the aforementioned external databases.
Audit Metadata