personal-genomics
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to run local Python scripts includingcomprehensive_analysis.py,combine_sources.py, andgenotype_cram.py, and to perform environment management tasks such as creating virtual environments. - [EXTERNAL_DOWNLOADS]: The skill performs environment setup by installing Python packages (including
pandas,numpy,scipy, andreportlab) from the official PyPI registry usingpip install -r requirements.txt. - [PROMPT_INJECTION]: The skill processes untrusted external data from genomic files and script-generated output (
agent_summary.json), creating a surface for indirect prompt injection. - Ingestion points: User-provided DNA files (e.g., 23andMe, AncestryDNA, VCF) and analysis summaries.
- Boundary markers: Absent in the instructions for processing external content.
- Capability inventory:
Bashfor command execution,Readfor file access, andSendUserFilefor report generation. - Sanitization: No explicit sanitization or validation of external input data is provided in the instruction set.
Audit Metadata