tooluniverse-electron-microscopy

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by ingesting and processing untrusted data from external biological databases and publication archives.
  • Ingestion points: Data enters the agent's context through tools like EMDB_get_structure, EMPIAR_get_entry, CryoET_get_dataset, and PubMed_search_articles as described in SKILL.md.
  • Boundary markers: The instructions lack explicit delimiters or instructions to the agent to disregard potential commands embedded within the retrieved scientific metadata or abstracts.
  • Capability inventory: The skill utilizes specialized data retrieval and analysis tools. It does not have access to high-risk capabilities such as arbitrary shell command execution, file system modification, or network requests to arbitrary non-scientific domains.
  • Sanitization: There is no mention of sanitization, filtering, or validation for the content retrieved from external sources before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 11:09 AM