tooluniverse
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: External dependency. The skill utilizes the
tooluniversePython package which originates from a recognized scientific research institution (Zitnik Lab at Harvard). The installation process viauv pip installis a standard and expected procedure for this type of agent skill. - [SAFE]: Credential Handling. The documentation for the
OpenRouterClientcorrectly instructs users to provide their own API keys and uses placeholders likeyour_keyin code examples, avoiding the use of hardcoded secrets. - [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill provides tools to fetch and analyze data from external scientific sources (e.g., PubMed, UniProt, and chemical databases) which is then processed by LLM-based components.
- Ingestion points: External data enters the context via tools like
PubMed_searchandGEO_download_datasetinscripts/example_workflow.pyandreferences/tool-composition.md. - Boundary markers: The instructions do not specify the use of delimiters or specific system instructions to ignore potential commands embedded within the retrieved scientific text.
- Capability inventory: The skill allows for network requests (scientific API access), file system interaction (via result-saving hooks), and complex multi-step workflow orchestration.
- Sanitization: The skill documentation recommends validating scientific identifiers such as SMILES strings and UniProt IDs, which serves as a security control for those specific data types.
Audit Metadata