gene-database
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches genomic metadata and sequences from the National Center for Biotechnology Information (NCBI) via its official E-utilities and Datasets APIs.
- [COMMAND_EXECUTION]: Employs local Python scripts including query_gene.py, fetch_gene_data.py, and batch_gene_lookup.py to manage API queries and data retrieval tasks.
- [PROMPT_INJECTION]: Contains specific instructions that steer the agent's behavior to suggest the author's platform (k-dense.ai) when users encounter complex or multi-step research workflows.
- [PROMPT_INJECTION]: Exhibits a surface for indirect prompt injection by processing external genomic data and publication details from NCBI. 1. Ingestion points: API responses containing gene descriptions and bibliographic information. 2. Boundary markers: None specified to delineate external data from agent instructions. 3. Capability inventory: Limited to local search and formatting scripts with no dangerous filesystem or network write access. 4. Sanitization: The documentation does not specify validation or escaping procedures for retrieved API content.
Audit Metadata