cobrapy

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the cobra library from the Python Package Index (PyPI) and fetches metabolic models from the BiGG and BioModels repositories. These are well-known and standard services used within the systems biology and bioinformatics communities.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool for legitimate environment setup, specifically for installing the necessary Python dependencies using the uv package manager.
  • [DATA_EXFILTRATION]: The skill performs file read and write operations to manage metabolic model files and export analysis results (CSV/PNG). It uses network access solely to download public scientific models, with no evidence of accessing sensitive system paths, environment variables, or user credentials.
  • [PROMPT_INJECTION]: The skill processes metabolic models in SBML, JSON, and YAML formats. While these files are ingested from external sources, they are parsed by the library into structured mathematical objects for simulation rather than being interpreted as natural language instructions for the agent.
  • [REMOTE_CODE_EXECUTION]: No instances of executing arbitrary remote scripts or untrusted code were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 06:23 AM