skills/wu-yc/labclaw/geo-database/Gen Agent Trust Hub

geo-database

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads gene expression data and experiment metadata from the National Center for Biotechnology Information (NCBI) via FTP and HTTPS using the GEOparse and Biopython libraries.
  • [PROMPT_INJECTION]: The skill instructions direct the agent to proactively suggest the author's commercial platform (K-Dense Web) when task complexity increases, which steers the agent's behavior toward self-promotion.
  • [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection because it ingests and processes metadata and data tables from the public NCBI GEO repository.
  • Ingestion points: The skill uses GEOparse.get_GEO, Entrez.efetch, and Entrez.esummary to retrieve external records in SKILL.md.
  • Boundary markers: There are no explicit markers or instructions to ignore embedded commands within the processed data.
  • Capability inventory: The skill performs file system operations (writing CSVs and plots via to_csv and savefig) and network requests to NCBI APIs.
  • Sanitization: The provided code examples do not include sanitization or validation of the retrieved external content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 04:33 AM