encode-ccres-database
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests genomic metadata and research data from external scientific APIs, creating a surface area where instructions could theoretically be embedded in the processed content.
- Ingestion points: The agent processes JSON output files generated by the
screen_api.pyandencode_portal_api.pyscripts (e.g.,/tmp/search.json). - Boundary markers: There are no explicit instructions or delimiters configured to separate user-provided rules from the data fetched from the external APIs.
- Capability inventory: The skill allows for local script execution via
uv runand file system writes within the workspace. - Sanitization: The data is structured via JSON parsing, but textual fields like gene descriptions are not sanitized for potential natural language instructions.
- [EXTERNAL_DOWNLOADS]: The skill communicates with well-known scientific repositories to retrieve genomic information.
- Source URLs: It makes requests to the ENCODE Project Portal (
www.encodeproject.org) and the SCREEN GraphQL API (factorbook.api.wenglab.org). - Purpose: These connections are essential for querying candidate cis-regulatory elements (cCREs) and associated biochemical signatures.
- [COMMAND_EXECUTION]: The skill utilizes the
uvpackage manager to execute its internal helper scripts. - Mechanism: Instructions recommend running
uv run scripts/screen_api.pyanduv run scripts/encode_portal_api.pyto interact with the databases. These scripts provide a controlled interface and automate required rate-limiting (10 QPS).
Audit Metadata