alterlab-dnanexus
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external biological data files and provides capabilities to execute platform jobs and local commands based on the contents of these files.
- Ingestion points: The skill uses
dxpy.download_dxfileanddxpy.find_data_objectsto retrieve sequencing data and other data objects from the platform (seen in references/data-operations.md). - Boundary markers: No explicit boundary markers or instructions to ignore embedded content are defined for the ingested genomics data.
- Capability inventory: The skill utilizes
subprocess.check_callto run external bioinformatics tools anddxpy.DXApplet.runto launch cloud-based jobs (described in references/app-development.md and references/job-execution.md). - Sanitization: No specific sanitization or validation logic was identified for the content of the processed genomics files.
- [COMMAND_EXECUTION]: The skill uses
subprocess.check_callto execute bioinformatics tools and package managers within the execution environment. - Evidence: In references/configuration.md and references/app-development.md, the skill demonstrates using
subprocessto call tools likesamtools,bwa, andpipfor processing data and managing dependencies within DNAnexus worker nodes.
Audit Metadata