ecologist
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external biodiversity databases and user-provided datasets, which creates a potential surface for indirect prompt injection if that data contains hidden instructions.
- Ingestion points: The profile instructs the agent to download and process data using the
rgbifandpygbifAPIs for GBIF and iNaturalist data, as well as ingesting user-provided count matrices and site coordinates (SKILL.md). - Boundary markers: The instructions do not specify any boundary markers or instructions to disregard embedded commands when processing these external data streams.
- Capability inventory: The skill encourages the use of a comprehensive R and Python statistical stack (including
vegan,glmmTMB, andunmarked) to perform computations and modeling on the ingested data (SKILL.md). - Sanitization: No specific sanitization or input validation measures are mentioned for handling potentially untrusted data content beyond taxonomic harmonization.
Audit Metadata