bio-cosmic
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE] (SAFE): No security issues detected. The script is a standard data processing utility using well-known libraries like pandas and typer.
- [EXTERNAL_DOWNLOADS] (SAFE): Documentation refers users to download datasets from the official COSMIC website (cancer.sanger.ac.uk). This is a reputable scientific source and the download process is manual.
- [DATA_EXFILTRATION] (SAFE): The script does not perform any network operations or access sensitive system directories.
- [PROMPT_INJECTION] (SAFE): Low risk surface for indirect injection. 1. Ingestion points: user-provided CSV and gene list files in scripts/query_cosmic_genes.py. 2. Boundary markers: None. 3. Capability inventory: Local JSON file writing to user-specified path; no shell or network access. 4. Sanitization: Relies on pandas CSV parsing.
Audit Metadata