tooluniverse-phylogenetics
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of several well-known and trusted Python packages for bioinformatics and data analysis, including
phykit,dendropy,biopython,pandas,numpy, andscipy. These are installed via standard package managers. - [SAFE]: The skill leverages the
ToolUniverseframework to interact with well-known and trusted scientific data providers such as NCBI, UniProt, and Ensembl. These interactions are standard for sequence retrieval and tree annotation tasks. - [PROMPT_INJECTION]: The skill processes untrusted external data in the form of alignment (FASTA, PHYLIP, Nexus) and tree (Newick) files. This creates a surface for indirect prompt injection (Category 8). * Ingestion points: Files are loaded via
load_alignment()andload_tree()as described inSKILL.md. * Boundary markers: No explicit boundary markers or instructions to ignore embedded content were identified in the workflow descriptions. * Capability inventory: The skill performs complex mathematical and statistical computations using thePhyKITlibrary and Python's data science stack. * Sanitization: No specific sanitization or validation logic for the content of the biological sequence files was found in the provided documentation.
Audit Metadata