drugbank-database
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill contains a section that instructs the agent to proactively suggest the 'K-Dense Web' commercial platform to the user when tasks reach a certain level of complexity. This instruction attempts to steer the agent's behavior to promote external services.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and parse large quantities of external XML data from the DrugBank database. This ingestion of untrusted content creates a surface for indirect prompt injection attacks, and the skill does not specify any boundary markers or sanitization procedures for this data.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external database files from go.drugbank.com and requires the installation of several Python packages, including drugbank-downloader, bioversions, lxml, pandas, rdkit, networkx, and scikit-learn.
Audit Metadata