locus-to-gene-mapper-skill
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Internal Script Execution: The skill uses
subprocess.runto orchestrate tasks by calling auxiliary scripts (e.g.,variant_coordinate_finder.py,gtex_eqtl.py) located within its own directory structure. This 'skill chaining' approach is used to modularize complex bioinformatic workflows. The implementation uses best practices by passing arguments as a list and avoiding a shell environment. - Scientific Data Retrieval: The script performs network operations to retrieve genomic data from well-known scientific organizations, including the European Bioinformatics Institute (EBI), Open Targets, the Broad Institute, and the National Center for Biotechnology Information (NCBI). These are standard, reputable sources in the research community.
- Automated Data Processing: As a data-intensive tool, the skill ingests information from external APIs. While processing external data is a common architectural pattern, it does introduce a minor surface for indirect prompt injection. However, the risk is minimal as the script focuses on extracting structured scientific identifiers and scores rather than executable content.
Audit Metadata