biologist-analyst

Pass

Audited by Gen Agent Trust Hub on Feb 15, 2026

Risk Level: LOWNO_CODE
Full Analysis
  • Prompt Injection (SAFE): No instructions found that attempt to override agent behavior or bypass safety filters. The language is purely instructional and follows biological research standards.- Data Exposure & Exfiltration (SAFE): No hardcoded credentials, sensitive file paths, or unauthorized network operations were identified. External URLs are restricted to trusted academic domains like NCBI, Nature, and Khan Academy.- Obfuscation (SAFE): No encoded content, zero-width characters, or homoglyph-based evasion techniques were detected in the text.- Unverifiable Dependencies & Remote Code Execution (SAFE): The skill does not include package manifests (e.g., package.json, requirements.txt) or commands to download and execute remote scripts.- Indirect Prompt Injection (INFO): While the skill is designed to process external biological data and questions, it lacks defined executable capabilities (such as file system writes or shell access) that would create a high-risk attack surface.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 15, 2026, 09:56 PM