alterlab-gtars

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external genomic data files which introduces a potential attack surface for indirect prompt injection.
  • Ingestion points: The skill ingests genomic interval data and sequences via RegionSet (SKILL.md), the uniwig CLI (references/coverage.md), and the refget API (references/refget.md).
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded content are provided in the instructions.
  • Capability inventory: The skill utilizes the Bash tool to run CLI subcommands and has file system access via the Read, Write, and Edit tools.
  • Sanitization: No explicit sanitization or validation of the internal content of the BED, BAM, or FASTA files is mentioned in the documentation.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of dependencies from well-known software registries.
  • Evidence: Installation instructions specify fetching the gtars Python package from PyPI and the gtars-cli Rust binary from crates.io (SKILL.md). These are standard and recognized distribution channels.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:37 PM