bioc-pmc-api

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches article data from the official National Center for Biotechnology Information (NCBI) API. This is a well-known and trusted government service, and the operations are consistent with the skill's documented purpose of retrieving biomedical literature.
  • [PROMPT_INJECTION]: This skill ingests untrusted full-text article content from external sources, which constitutes a potential surface for indirect prompt injection.
  • Ingestion points: Article text retrieved from the BioC API at ncbi.nlm.nih.gov.
  • Boundary markers: None observed in the implementation examples.
  • Capability inventory: Uses the requests library to fetch data and standard Python methods to extract and display text.
  • Sanitization: No explicit sanitization or filtering of the retrieved content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 10:16 PM