etetoolkit
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Indirect Prompt Injection] (LOW): The skill processes external Newick tree files and taxa lists, which could host malicious instructions designed to influence an agent's logic during processing.\n
- Ingestion points: Input arguments for tree files in
scripts/quick_visualize.pyandscripts/tree_operations.py, and thekeep-taxaargument inscripts/tree_operations.py.\n - Boundary markers: Absent. No delimiters or instructions are provided to the agent to disregard content within data files.\n
- Capability inventory: The skill can write files to the system using the
ete3library'srenderandwritemethods.\n - Sanitization: Absent. The scripts pass raw user input directly to the
ete3parser without validation or escaping.\n- [Unverifiable Dependencies] (LOW): The scripts depend on theete3library. While this is a standard bioinformatics package, it is not from a pre-approved trusted organization as defined in the security analysis skill.
Audit Metadata