tooluniverse-network-pharmacology
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions explicitly direct the agent to 'write and run Python code via Bash' for statistical computations and data processing. This is the primary method for analyzing network proximity and functional enrichment using the collected data.
- [EXTERNAL_DOWNLOADS]: The
scripts/network_proximity.pyscript programmatically downloads the STRING protein-protein interaction network fromstringdb-downloads.org. This is a well-known and trusted academic repository for biological network data, and the download is required for the proximity calculation algorithm used by the skill. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest large amounts of data from external biological and pharmacological databases (OpenTargets, DrugBank, STRING, etc.). This creates a potential surface for indirect prompt injection if those external sources were to contain adversarial content, although this is a low risk for specialized scientific databases.
- Ingestion points: Tool outputs from OpenTargets, DrugBank, STRING, and PubMed API calls as described in
SKILL.md(Phase 1 and Phase 2). - Boundary markers: The instructions do not define specific delimiters or security warnings for the data ingested from these tools.
- Capability inventory: The skill has the capability to write files (reports) and execute Python code via the bash tool.
- Sanitization: There are no explicit instructions to sanitize or validate the content returned by external biological databases before processing.
Audit Metadata