pdb-database
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads protein structure files in PDB and mmCIF formats from the official RCSB PDB servers at 'https://files.rcsb.org/download/'. These downloads are performed using the 'requests' library and target a well-known scientific service essential for the skill's primary purpose.
- [COMMAND_EXECUTION]: A troubleshooting section in 'references/api_reference.md' contains an example using 'subprocess.run' to execute 'curl'. This is intended for developers to verify connectivity to the legitimate RCSB PDB API and does not involve untrusted user input.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting and processing metadata (e.g., protein titles and descriptions) from the external RCSB PDB database via 'rcsbapi.data.fetch'. While these examples lack explicit boundary markers or sanitization, the risk is minimal as it involves structured biological research data from a reputable source. The skill's capabilities include local file system writes and command execution.
Audit Metadata