microbiome-diversity-reporter
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the skill's instructions or scripts. The code behavior is consistent with its stated purpose of scientific data analysis.- [EXTERNAL_DOWNLOADS]: The skill relies on standard, well-known Python packages listed in
requirements.txt(includingnumpy,pandas,scipy, andscikit-bio). These are reputable libraries from established ecosystems. No remote script execution or binary downloads from untrusted sources are performed at runtime.- [COMMAND_EXECUTION]: The primary script (scripts/main.py) performs data processing and file I/O using standard Python libraries. It does not utilize dangerous functions such asos.system(),subprocess.run(), oreval()to execute shell commands or dynamic code.- [DATA_EXFILTRATION]: No network-enabled operations (e.g.,requests,curl,urllib) were found in the provided code. The script's operations are limited to reading user-provided TSV files and writing the resulting analysis artifacts to local paths specified by the user.- [PROMPT_INJECTION]: TheSKILL.mdinstructions follow standard instructional patterns for an AI agent without attempting to override safety filters, bypass guidelines, or extract system prompts.- [INDIRECT_PROMPT_INJECTION]: The script processes external data from TSV files and incorporates sample names and metadata into HTML/Markdown reports. While the script does not sanitize this data before interpolation into the HTML template, this represents a low-risk surface for typical data reporting tools and does not provide an execution path for the agent.
Audit Metadata