biopython
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Biopython library using standard package managers (pip, conda) and by cloning from its official GitHub repository.
- [COMMAND_EXECUTION]: Provides patterns for executing external bioinformatics tools like ClustalW via the
ClustalwCommandlinewrapper. This is a standard feature for biological sequence alignment workflows. - [DATA_EXFILTRATION]: Includes instructions for interacting with NCBI databases using Entrez and BLAST APIs. These are intended network operations for the skill's domain, and the documentation correctly advises the user to set a contact email and adhere to rate-limiting guidelines to prevent service abuse.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface for processing untrusted biological data files (FASTA, FASTQ, PDB, etc.) which are then used in subsequent operations.
- Ingestion points: Biological file parsing modules documented in
SKILL.md(e.g.,SeqIO.parse,AlignIO.read,PDBParser). - Boundary markers: Not applicable as data is parsed as structured biological objects rather than natural language.
- Capability inventory: File system read/write access, network operations to NCBI servers, and local command execution for alignment tools.
- Sanitization: The library's internal parsing logic validates the input data against biological file format specifications.
Audit Metadata