alterlab-gtars
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external genomic data files which introduces a potential attack surface for indirect prompt injection.
- Ingestion points: The skill ingests genomic interval data and sequences via
RegionSet(SKILL.md), theuniwigCLI (references/coverage.md), and therefgetAPI (references/refget.md). - Boundary markers: No explicit boundary markers or instructions to ignore embedded content are provided in the instructions.
- Capability inventory: The skill utilizes the Bash tool to run CLI subcommands and has file system access via the Read, Write, and Edit tools.
- Sanitization: No explicit sanitization or validation of the internal content of the BED, BAM, or FASTA files is mentioned in the documentation.
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of dependencies from well-known software registries.
- Evidence: Installation instructions specify fetching the
gtarsPython package from PyPI and thegtars-cliRust binary from crates.io (SKILL.md). These are standard and recognized distribution channels.
Audit Metadata