screen-mab-fto-risk-ls
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted biological sequence data and patent records, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: The
user-intake-protocol.mdandsequence-search.mdfiles define the ingestion of VH, VL, CDR, and construct sequences, alongside patent data fetched via MCPs. - Boundary markers: The workflow utilizes structured tech profiles and intake gates, although it lacks explicit delimiters to prevent the agent from obeying instructions that could be hidden within sequence listings or patent claim text.
- Capability inventory: The skill uses
advanced_patent_search,patent_briefing, anddrug_assetMCPs, and executes a local Python scriptscripts/mab_fto_recall_estimator.pyfor search diagnostics. - Sanitization: The instructions explicitly advise against placing secrets or API keys in queries and logs. Furthermore, the
output-contract.mdmandates that generated HTML reports must be self-contained and free of external network calls, fonts, or CDNs. - [SAFE]: All external URLs and tools referenced belong to the author's official domain (
patsnap.com) or represent well-known industry databases (INPADOC). - [SAFE]: The Python script
scripts/mab_fto_recall_estimator.pyis a utility for data normalization and search diagnostics; it uses only standard libraries and contains no network operations, subprocess calls, or dynamic code execution.
Audit Metadata