benchling-integration
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard integration tool for a well-known scientific platform and does not contain any malicious code or instructions.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the official
benchling-sdkand other well-known Python packages likebiopython,httpx, andpython-dotenvfrom trusted registries. - [CREDENTIALS_UNSAFE]: The skill provides clear guidance on secure credential management, explicitly advising against hardcoding API keys and recommending the use of environment variables and secret management services.
- [PROMPT_INJECTION]: The skill ingests data from the Benchling API, which creates a surface for indirect prompt injection, though the risk is assessed as safe. Ingestion points: Registry entities and notebook entries fetched from Benchling API. Boundary markers: None identified in example code. Capability inventory: Benchling API network requests and local file writing for CSV exports. Sanitization: No explicit sanitization implemented in example code.
Audit Metadata