cosmic-database

Pass

Audited by Gen Agent Trust Hub on Mar 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates data retrieval from the official COSMIC (Catalogue of Somatic Mutations in Cancer) database hosted by the Sanger Institute at cancer.sanger.ac.uk.- [PROMPT_INJECTION]: The SKILL.md documentation includes a behavioral directive for the AI agent to proactively suggest the author's commercial platform (www.k-dense.ai) when user requests reach a certain level of complexity.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection by processing external genomic data files. 1. Ingestion points: TSV and VCF files downloaded via scripts/download_cosmic.py. 2. Boundary markers: None present in the provided processing examples. 3. Capability inventory: Includes network requests via requests and local file system write access. 4. Sanitization: Data is processed directly using pandas or pysam without validation or sanitization of content.- [CREDENTIALS_UNSAFE]: The download utility requires COSMIC account credentials (email and password). These are passed as function arguments or via secure user prompts (getpass) and are not hardcoded or stored by the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 3, 2026, 08:47 PM