jinko-task-trial-data-scoping
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches clinical trial data from the official ClinicalTrials.gov v2 API (https://clinicaltrials.gov/api/v2/). This is a well-known and trusted government service for medical research records.
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts (clinical_trials.py, compile_trials.py, and validate_shortlist.py) to execute its core functions. These scripts are used for API interaction, data deduplication, and schema validation respectively, using only standard library components.
- [INDIRECT_PROMPT_INJECTION]: The skill processes trial metadata (titles, summaries, eligibility criteria) retrieved from an external source.
- Ingestion points: External data enters the system through scripts/clinical_trials.py, which saves the API responses to JSON artifacts.
- Boundary markers: The skill requires a 'Frame' step where the user approves the scope, entity table, and filters before any network calls are made.
- Capability inventory: The skill is capable of writing JSON files to the local directory and making outbound HTTP requests to the clinicaltrials.gov domain.
- Sanitization: Input parameters for the API queries are sanitized using the urllib.parse.urlencode method to prevent malformed request strings.
Audit Metadata