tooluniverse-stem-cell-organoid

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the cellxgene-census Python package as a required dependency for accessing genomic census data from the Chan Zuckerberg Initiative. This is a standard and well-known library in the bioinformatics community.
  • [INDIRECT_PROMPT_INJECTION]: The skill incorporates tools designed to fetch and process data from external scientific sources, creating a potential surface for indirect prompt injection if those sources were to contain malicious instructions.
  • Ingestion points: External data is ingested via tools such as PubMed_search_articles, GEO_search_rnaseq_datasets, hca_search_projects, and CELLxGENE_get_expression_data in the SKILL.md file.
  • Boundary markers: The instructions do not define specific delimiters or warnings to the agent to ignore potentially embedded instructions within the fetched scientific data.
  • Capability inventory: The skill is limited to data retrieval and analysis tools; it lacks dangerous capabilities such as arbitrary file system writes, shell command execution, or uncontrolled network exfiltration.
  • Sanitization: There are no explicit instructions for sanitizing or filtering the content retrieved from scientific databases before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 06:31 AM