geo-database

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions and code for downloading scientific datasets and metadata from official National Center for Biotechnology Information (NCBI) servers. The remote resources are established, trusted bioinformatics repositories (ncbi.nlm.nih.gov).
  • [COMMAND_EXECUTION]: Includes example commands for wget and curl to retrieve data files from NCBI's public FTP and API servers. These are standard tools for the research workflows described.
  • [PROMPT_INJECTION]: Evaluated the skill's attack surface regarding indirect prompt injection from external scientific metadata.
  • Ingestion points: SOFT, Series Matrix, and MINiML files downloaded from NCBI GEO (referenced in SKILL.md and geo_reference.md).
  • Boundary markers: Absent; metadata and data tables are parsed directly into data structures.
  • Capability inventory: File writing to local storage (CSV/binary) and network requests to NCBI endpoints.
  • Sanitization: Absent; however, the highly structured nature of genomic data and metadata significantly mitigates the risk of successful natural language instruction attacks.
  • [SAFE]: No malicious code, persistence mechanisms, or obfuscated content were detected. The skill follows established best practices for programmatic database access, including the use of placeholders for user-supplied API credentials and mandatory identification via email for rate limiting.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 07:59 PM