geo-database
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions and code for downloading scientific datasets and metadata from official National Center for Biotechnology Information (NCBI) servers. The remote resources are established, trusted bioinformatics repositories (ncbi.nlm.nih.gov).
- [COMMAND_EXECUTION]: Includes example commands for
wgetandcurlto retrieve data files from NCBI's public FTP and API servers. These are standard tools for the research workflows described. - [PROMPT_INJECTION]: Evaluated the skill's attack surface regarding indirect prompt injection from external scientific metadata.
- Ingestion points: SOFT, Series Matrix, and MINiML files downloaded from NCBI GEO (referenced in SKILL.md and geo_reference.md).
- Boundary markers: Absent; metadata and data tables are parsed directly into data structures.
- Capability inventory: File writing to local storage (CSV/binary) and network requests to NCBI endpoints.
- Sanitization: Absent; however, the highly structured nature of genomic data and metadata significantly mitigates the risk of successful natural language instruction attacks.
- [SAFE]: No malicious code, persistence mechanisms, or obfuscated content were detected. The skill follows established best practices for programmatic database access, including the use of placeholders for user-supplied API credentials and mandatory identification via email for rate limiting.
Audit Metadata