latchbio-integration
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the
latchPython package, which is the official SDK for the LatchBio platform. - [COMMAND_EXECUTION]: The documentation provides examples for using the
latchcommand-line interface, including commands for authentication (latch login), project initialization (latch init), and workflow deployment (latch register). These are standard operations for the platform's ecosystem. - [PROMPT_INJECTION]: The skill documents how to ingest external bioinformatics files using
LatchFileandLatchDirtypes, which represents an indirect prompt injection surface. The impact is limited to the Latch platform's execution environment. - Ingestion points: Workflow parameters that accept
LatchFileorLatchDirobjects, such asinput_fileinSKILL.md. - Boundary markers: Not explicitly implemented in the provided examples.
- Capability inventory: Cloud file access, serverless task execution on GPU/CPU resources, and registry metadata updates.
- Sanitization: Not explicitly described in the skill's instructions or code snippets.
Audit Metadata