clinpgx-database
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill does not contain any detected malicious patterns, obfuscation, or high-risk command execution.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the standard Python
requestslibrary for API communication and optionallypandasfor data analysis. These are well-known and trusted packages from the official Python Package Index (PyPI). - [DATA_EXPOSURE_AND_EXFILTRATION]: Network activity is restricted to the official ClinPGx API domain (api.clinpgx.org). This communication is required for the skill's primary function of retrieving pharmacogenomic data.
- [PROMPT_INJECTION]: The skill ingests data from the ClinPGx API. While this creates a potential surface for indirect prompt injection if the remote data source were compromised, the skill lacks dangerous capabilities—such as arbitrary shell execution or access to sensitive system files—that would allow for a successful exploit.
Audit Metadata