genebass-gene-burden-skill
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [Input Validation]: The skill uses a strict regular expression (
^ENSG[0-9]+(?:\.[0-9]+)?$) to validate Ensembl gene IDs before they are used in any further processing, effectively preventing common injection patterns. - [Safe Network Operations]: API calls to the Genebass platform are performed using the
requestslibrary with a defined timeout (30 seconds) to prevent hanging processes. It also usesurllib.parse.quoteto ensure parameters are safely encoded before being appended to the URL. - [Error Handling]: The script robustly handles various failure modes, including JSON parsing errors from stdin, network connectivity issues, and non-200 HTTP responses from the upstream API, providing clear error messages without exposing sensitive internal state.
- [Least Privilege]: The skill performs read-only operations against a public genomic database and does not require or request access to local sensitive files, environment variables, or administrative privileges.
Audit Metadata