string-protein-interaction-analysis-with-omicverse

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill interacts with the STRING database API (string-db.org) to retrieve protein interaction data. This is a well-known, public scientific resource managed by recognized research institutions and is essential for the skill's intended use case.
  • [PROMPT_INJECTION]: The skill processes user-supplied gene lists, which serves as a surface for indirect prompt injection.
  • Ingestion points: The gene_list variable defined in SKILL.md and reference.md.
  • Boundary markers: None are explicitly defined in the provided code samples.
  • Capability inventory: The skill performs network API queries (ov.bulk.string_interaction) and generates network visualizations (ppi.plot_network).
  • Sanitization: The skill includes validation logic, including deduplication using dict.fromkeys, checking for minimum input length, and verifying species taxonomy identifiers are integers.
  • [SAFE]: The skill uses the author's own library, OmicVerse, for its primary logic. There is no evidence of obfuscation, persistent mechanisms, or attempts to access sensitive local configuration files or credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 05:43 PM
Security Audit — agent-trust-hub — string-protein-interaction-analysis-with-omicverse