ncbi-clinicaltables-skill
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [File System Interaction]: The script
scripts/ncbi_gene_clinicaltables.pycan write API responses to a local path defined by theraw_output_pathparameter. This is used whensave_rawis enabled to manage large datasets. While functional, it is important to ensure the agent uses designated directories for these files. - [Network Operations]: The skill connects to
clinicaltables.nlm.nih.govto retrieve gene data. This is a well-known service provided by the National Library of Medicine and is consistent with the skill's stated purpose. - [Data Processing Surface]: The skill incorporates gene data from an external API into the agent's context, which is a potential surface for indirect prompt injection.
- Ingestion points: External data is fetched in
scripts/ncbi_gene_clinicaltables.pyvia HTTP GET requests. - Boundary markers: The skill does not explicitly use delimiters for the fetched data.
- Capability inventory: The skill has the ability to write files to the local disk via the
Path.write_textmethod. - Sanitization: Results are processed through a
_compactfunction that truncates long strings and limits the number of items returned to the agent, providing a degree of structural validation and output management.
Audit Metadata