geo-database
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches biological datasets and metadata from the National Center for Biotechnology Information (NCBI) using official FTP services (ftp.ncbi.nlm.nih.gov) and web APIs (www.ncbi.nlm.nih.gov). These are well-known and trusted scientific resources.
- [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to download and process external experimental data (SOFT, MINiML, and Matrix files) from public repositories, which represents a potential attack surface.
- Ingestion points: Data is ingested via the
GEOparselibrary andftplibas demonstrated inSKILL.md. - Boundary markers: The provided code examples do not implement specific delimiters or 'ignore' instructions to isolate the downloaded data from the agent's control logic.
- Capability inventory: The skill's environment includes file system write access (
os.makedirs,open().write) and network communication capabilities (ftplib,EntrezAPI). - Sanitization: The skill does not demonstrate explicit sanitization or filtering of the content within the scientific data files before processing.
Audit Metadata