alterlab-depmap
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches dataset inventory and matrix files from the Figshare API (api.figshare.com). Figshare is a widely recognized scientific data repository used for hosting DepMap public releases.
- [COMMAND_EXECUTION]: Employs Python scripts to download and process CSV datasets. The logic is transparently defined in both the instruction markdown and a standalone utility script.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies cell lines and gene effects by parsing external CSV data. While this ingestion point is standard for bioinformatics, the lack of sanitization for the literal content of these files is noted as a potential attack surface, though mitigated by the use of reputable academic data sources.
- [DYNAMIC_EXECUTION]: Programmatically generates and executes Python code snippets for calculating co-essentiality, performing Mann-Whitney U tests, and filtering cancer-specific dependencies.
Audit Metadata