tooluniverse-proteomics-data-retrieval
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions direct the agent to write and execute Python code via Bash to perform data analysis tasks such as statistics and enrichment calculation. This is a standard functional requirement for data retrieval and processing skills.
- [DYNAMIC_EXECUTION]: The skill requires the agent to generate and run Python scripts at runtime using common data science libraries (pandas, scipy, statsmodels, matplotlib) to analyze metadata retrieved from external sources.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on an attack surface for indirect prompt injection by ingesting metadata from external proteomics repositories (MassIVE and ProteomeXchange).
- Ingestion points: Metadata is retrieved from public APIs via the
MassIVE_get_datasetandProteomeXchange_get_datasettools. - Boundary markers: The instructions do not explicitly define delimiters to separate external metadata from the agent's internal instructions.
- Capability inventory: The agent possesses command execution capabilities (Bash/Python) to process the ingested data.
- Sanitization: There are no documented steps for sanitizing or escaping the metadata retrieved from the remote repositories before processing.
Audit Metadata