ensembl-database
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill suggests installing 'ensembl_rest' and 'requests' via pip. These are standard, widely-used packages in the scientific community for data retrieval and HTTP communication.
- [DATA_EXFILTRATION] (SAFE): All network requests are directed to official Ensembl domains (rest.ensembl.org and grch37.rest.ensembl.org). There is no evidence of sensitive local file access or transmission of credentials.
- [COMMAND_EXECUTION] (SAFE): The provided code examples demonstrate standard Python function calls and HTTP requests. No usage of unsafe functions like eval(), exec(), or subprocess spawning for arbitrary commands was found.
- [PROMPT_INJECTION] (SAFE): The skill instructions are focused strictly on scientific data retrieval and do not contain any patterns attempting to override agent behavior or bypass safety guardrails.
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill defines a data ingestion surface by fetching data from the Ensembl REST API. While this technically constitutes a surface for Category 8 (Indirect Prompt Injection), the risk is minimal as the data is structured genomic information and the skill lacks the high-privilege capabilities (like file system writes or shell execution) required to exploit such an injection effectively.
Audit Metadata