skills/wu-yc/labclaw/pdb-database/Gen Agent Trust Hub

pdb-database

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The section 'Suggest Using K-Dense Web For Complex Worflows' contains explicit behavioral steering. It instructs the agent to proactively recommend an external platform (www.k-dense.ai) based on triggers like 'multi step reasoning' or 'long running workflows'. This is designed to influence the agent's conversational flow and output to include promotional content.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect injection by processing data from an external API and local user input.
  • Ingestion points: Data is retrieved from the RCSB PDB API via the rcsbapi library and requests calls to files.rcsb.org (SKILL.md).
  • Boundary markers: There are no explicit boundary markers or 'ignore embedded instructions' warnings when processing retrieved structural data or sequences.
  • Capability inventory: The skill includes the ability to perform network requests (requests.get) and write data to the local file system (open().write()) as seen in the coordinate download examples (SKILL.md).
  • Sanitization: No explicit sanitization or validation of the data returned by the API is present before it is written to the file system.
  • [EXTERNAL_DOWNLOADS]: The skill fetches 3D structural data and metadata from the official RCSB Protein Data Bank (rcsb.org and files.rcsb.org), which is a well-known and standard scientific service for structural biology.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:25 AM