alterlab-lamindb
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of CLI tools and Python scripting via the
laminandlnAPIs. This includes initialization (lamin init), authentication (lamin login), and instance management (lamin connect), which are necessary for the tool's operation. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
lamindblibrary and its plugins (e.g.,bionty,lamindb-wetlab) from standard registries like PyPI. It also includes instructions for fetching biological ontologies and datasets from established public repositories and cloud storage providers (AWS S3, Google Cloud Storage). - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface that processes external biological datasets (AnnData, Parquet, CSV) and metadata records.
- Ingestion points: Files are ingested via methods such as
ad.read_h5ad(),pd.read_csv(), andartifact.load()inSKILL.mdand reference files. - Boundary markers: The skill does not explicitly define prompt boundary markers for data content, though it uses typed features to scope metadata.
- Capability inventory: The skill has access to
Bash,Write, andEdittools, allowing for file modification and command execution based on processed data. - Sanitization: Curation workflows include standardization via
cat.standardize()and validation against biological ontologies, which provides a layer of data normalization for biological metadata fields. - [PRIVILEGE_ESCALATION]: Documentation in
references/setup-deployment.mdincludessudocommands for configuring system-wide cache directories and permissions in multi-user environments. These instructions are transparently documented as administrative setup tasks for shared infrastructure.
Audit Metadata