benchling-integration
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
benchling-sdkpackage via standard package managers likepip(uv) orpoetry. These are references to official, well-known libraries for interacting with the Benchling platform. - [COMMAND_EXECUTION]: The documentation provides example shell commands for installing dependencies (
uv pip install benchling-sdk,poetry add benchling-sdk). These are benign and standard for setting up a development environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from Benchling's registry and notebook entries, which constitutes an external attack surface where untrusted data could theoretically influence agent behavior.
- Ingestion points: Data is ingested through SDK methods such as
benchling.dna_sequences.list(),benchling.containers.list(), andbenchling.entries.list()in theSKILL.mdfile. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the processing logic.
- Capability inventory: The skill possesses network communication capabilities (via the Benchling SDK) and file-writing capabilities (e.g., creating
sequences.csvin the Data Export example). - Sanitization: No explicit sanitization or validation of data retrieved from the Benchling platform is documented before processing or exporting.
Audit Metadata