skills/wu-yc/labclaw/ensembl-database/Gen Agent Trust Hub

ensembl-database

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides instructions and code examples for interacting with the Ensembl REST API, a well-known resource for vertebrate genomic data maintained by EMBL-EBI. All external links point to official documentation, legitimate scientific mirrors, or the author's official platform (K-Dense Inc.).
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by ingesting data from an external API. 1. Ingestion points: Data is retrieved from the Ensembl REST API (rest.ensembl.org) via HTTP GET requests. 2. Boundary markers: The skill does not implement delimiters or safety instructions to isolate external genomic data from the primary agent instructions. 3. Capability inventory: The skill utilizes network access via the 'requests' library and specialized genomic data handling through 'ensembl_rest'. It does not perform high-risk operations like system command execution or dynamic code evaluation. 4. Sanitization: The provided Python examples do not show evidence of input validation or response sanitization before processing the data.
  • [EXTERNAL_DOWNLOADS]: The skill identifies 'ensembl_rest' and 'requests' as dependencies. Both are widely-used, reputable packages available through standard Python package registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:25 AM