tooluniverse-stem-cell-organoid
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
cellxgene-censusPython package as a required dependency for accessing genomic census data from the Chan Zuckerberg Initiative. This is a standard and well-known library in the bioinformatics community. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates tools designed to fetch and process data from external scientific sources, creating a potential surface for indirect prompt injection if those sources were to contain malicious instructions.
- Ingestion points: External data is ingested via tools such as
PubMed_search_articles,GEO_search_rnaseq_datasets,hca_search_projects, andCELLxGENE_get_expression_datain theSKILL.mdfile. - Boundary markers: The instructions do not define specific delimiters or warnings to the agent to ignore potentially embedded instructions within the fetched scientific data.
- Capability inventory: The skill is limited to data retrieval and analysis tools; it lacks dangerous capabilities such as arbitrary file system writes, shell command execution, or uncontrolled network exfiltration.
- Sanitization: There are no explicit instructions for sanitizing or filtering the content retrieved from scientific databases before it is processed by the agent.
Audit Metadata