gget
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
gget setupcommands to download scientific data and models, such as the 4GB AlphaFold2 model parameters and the Eukaryotic Linear Motif (ELM) database, from their respective official repositories. - [EXTERNAL_DOWNLOADS]: The skill installs additional Python packages like
cellxgene-censusand OpenAI integration libraries during the setup of specific modules. - [COMMAND_EXECUTION]: The skill employs the Bash tool to run the
ggetCLI for database queries and to execute setup routines for various bioinformatics analysis modules. - [DATA_EXFILTRATION]: User-provided gene identifiers and sequences are transmitted to remote biological data services (including Ensembl, NCBI, UniProt, and OpenTargets) and OpenAI's API to perform requested analyses.
- [REMOTE_CODE_EXECUTION]: Documentation provides an example script for caching query results locally using the
picklemodule, which involves data deserialization. - [PROMPT_INJECTION]: The skill processes external files, such as FASTA records and gene lists, and interpolates this data into queries for external APIs, which serves as a potential surface for indirect prompt injection.
Audit Metadata