etetoolkit
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: Installation instructions include the use of
sudo apt-getto acquire system-level libraries for graphics rendering.- [COMMAND_EXECUTION]: The skill provides commands for installing Python packages and executing local utility scripts for tree manipulation and visualization.- [EXTERNAL_DOWNLOADS]: Automatically retrieves the NCBI taxonomy database (~300MB) from a well-known scientific repository upon initial use of the taxonomy module.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided biological data files (Newick, FASTA), representing an untrusted data ingestion surface. - Ingestion points: Data is loaded from files specified in the local environment.
- Boundary markers: None implemented in the provided workflows.
- Capability inventory: Includes file system writes, rendering of images/PDFs, and execution of Python scripts.
- Sanitization: Relies on standard library parsing without additional sanitization layers.
Audit Metadata