biopython
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill includes documentation for invoking external bioinformatics tools (Clustal Omega and MUSCLE) through Biopython's command-line wrappers.
- Evidence:
ClustalOmegaCommandlineandMuscleCommandlineexamples inreferences/alignment.md. - Context: These are standard library features for calling specialized external binaries, which is the primary purpose of this reference material.
- [EXTERNAL_DOWNLOADS] (SAFE): The code snippets rely on the
biopythonpackage, a well-established and trusted library in the scientific community. - [PROMPT_INJECTION] (LOW): The skill demonstrates how to ingest data from external files (FASTA, GenBank, etc.), which creates a surface for indirect prompt injection if the processed sequence headers contain malicious instructions meant for an LLM.
- Evidence Chain (Category 8):
- Ingestion points:
SeqIO.parse()andAlignIO.read()used across both files. - Boundary markers: None present in code snippets.
- Capability inventory: File reading/writing and subprocess calls for sequence alignment.
- Sanitization: No specific input sanitization is shown, though the library's parsers strictly validate biological sequence formats.
- Ingestion points:
Audit Metadata