biopython

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Biopython library using standard package managers (pip, conda) and by cloning from its official GitHub repository.
  • [COMMAND_EXECUTION]: Provides patterns for executing external bioinformatics tools like ClustalW via the ClustalwCommandline wrapper. This is a standard feature for biological sequence alignment workflows.
  • [DATA_EXFILTRATION]: Includes instructions for interacting with NCBI databases using Entrez and BLAST APIs. These are intended network operations for the skill's domain, and the documentation correctly advises the user to set a contact email and adhere to rate-limiting guidelines to prevent service abuse.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface for processing untrusted biological data files (FASTA, FASTQ, PDB, etc.) which are then used in subsequent operations.
  • Ingestion points: Biological file parsing modules documented in SKILL.md (e.g., SeqIO.parse, AlignIO.read, PDBParser).
  • Boundary markers: Not applicable as data is parsed as structured biological objects rather than natural language.
  • Capability inventory: File system read/write access, network operations to NCBI servers, and local command execution for alignment tools.
  • Sanitization: The library's internal parsing logic validates the input data against biological file format specifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:41 PM