biopython
Fail
Audited by Snyk on Mar 3, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt includes explicit examples that set Entrez.api_key = "your_api_key_here" and advises using API keys for NCBI rate limits, which encourages embedding secret values directly in generated code/outputs and thus creates an exfiltration risk.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md (and referenced files like references/databases.md and references/blast.md) explicitly instructs using Bio.Entrez, NCBIWWW.qblast, and PDB retrieval to fetch and parse records from public NCBI/PubMed/GenBank/BLAST/PDB sites, so the agent ingests untrusted public third‑party content and uses it to drive subsequent tool actions.
Audit Metadata