alterlab-pysam
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: No obfuscated code, hidden persistence mechanisms, or unauthorized data exfiltration attempts were found during the analysis of the skill files.
- [EXTERNAL_DOWNLOADS]: The skill installs the well-known
pysamPython package viauv pip.pysamis a standard bioinformatics library for working with high-throughput sequencing data. - [COMMAND_EXECUTION]: The skill provides access to
samtoolsandbcftoolscommands through thepysamlibrary wrapper. This functionality is intended for legitimate genomic file operations such as sorting, indexing, and format conversion. - [PROMPT_INJECTION]: The skill has a theoretical vulnerability to indirect prompt injection due to its processing of untrusted genomic data files (BAM, VCF, FASTA, etc.).
- Ingestion points: Data is ingested from genomic alignment and variant files using
pysam.AlignmentFile,pysam.VariantFile, and related classes (documented in references/alignment_files.md and references/variant_files.md). - Boundary markers: The skill does not define explicit delimiters or boundary markers to separate data from the processing context.
- Capability inventory: The skill can execute bioinformatics subcommands via
pysam.samtoolsand write new genomic files to the local system. - Sanitization: There is no evidence of sanitization for parsed metadata fields (e.g., read names, VCF header lines) before they are processed by the agent.
Audit Metadata