alterlab-pysam
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill handles various genomic file formats which can serve as vectors for indirect prompt injection if the files contain malicious payloads intended to manipulate the agent's logic.\n
- Ingestion points: The skill ingests untrusted data from multiple genomic file formats including SAM/BAM/CRAM, VCF/BCF, FASTA/FASTQ, and BED/GTF/GFF via classes like
pysam.AlignmentFile,pysam.VariantFile,pysam.FastaFile,pysam.FastxFile, andpysam.TabixFile(documented inSKILL.md,references/variant_files.md, andreferences/sequence_files.md).\n - Boundary markers: No boundary markers or delimiting instructions are provided to help the agent distinguish between data and potential instructions within the processed files.\n
- Capability inventory: The skill allows for the execution of external samtools and bcftools commands using
pysam.samtoolsandpysam.bcftools. It also provides methods for writing files, such asAlignmentFile.write(),VariantFile.write(), and standard Python file operations in workflow examples (documented inSKILL.mdandreferences/common_workflows.md).\n - Sanitization: There is no evidence of input validation or sanitization for the content read from these genomic files before it is processed or used in operations.\n- [COMMAND_EXECUTION]: The skill facilitates the execution of samtools and bcftools through the
pysamPython interface.\n - Evidence:
SKILL.mdandreferences/alignment_files.mddetail how to usepysam.samtoolsfor tasks such as sorting, indexing, and viewing genomic files, which involves spawning subprocesses to run these command-line utilities.\n- [DYNAMIC_EXECUTION]: The skill uses thepysamlibrary to wrap functional calls to external bioinformatics binaries.\n - Evidence: Usage of
pysam.samtoolsandpysam.bcftoolsto perform operations likesort,index, andviewinvolves runtime execution of external code based on the parameters provided to the Python functions.
Audit Metadata