ecologist

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external biodiversity databases and user-provided datasets, which creates a potential surface for indirect prompt injection if that data contains hidden instructions.
  • Ingestion points: The profile instructs the agent to download and process data using the rgbif and pygbif APIs for GBIF and iNaturalist data, as well as ingesting user-provided count matrices and site coordinates (SKILL.md).
  • Boundary markers: The instructions do not specify any boundary markers or instructions to disregard embedded commands when processing these external data streams.
  • Capability inventory: The skill encourages the use of a comprehensive R and Python statistical stack (including vegan, glmmTMB, and unmarked) to perform computations and modeling on the ingested data (SKILL.md).
  • Sanitization: No specific sanitization or input validation measures are mentioned for handling potentially untrusted data content beyond taxonomic harmonization.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 02:19 PM