tooluniverse-drug-drug-interaction
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves data from well-known medical and scientific services such as RxNorm, DrugBank, DailyMed, PubMed, and FAERS through the ToolUniverse interface. These sources are established public repositories for medication data and clinical literature.
- [COMMAND_EXECUTION]: The Python scripts (e.g., ddi_pipeline.py) utilize standard file I/O to create and progressively update interaction reports on the local filesystem. This activity is required for the skill's report-generation workflow.
- [PROMPT_INJECTION]: The skill processes user-provided medication names and external API results, creating an indirect prompt injection surface. This is a structural property of the clinical analysis use case. 1. Ingestion points: User-supplied drug names and tool-retrieved abstracts in ddi_pipeline.py. 2. Boundary markers: Absent. 3. Capability inventory: Local file-write operations. 4. Sanitization: Not explicitly implemented in the provided scripts.
Audit Metadata