alterlab-tiledbvcf

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install tiledbvcf-py from the official tiledb Anaconda channel and references Docker images from the tiledb/ repository on Docker Hub. TileDB is a well-known data management company, and these are standard distribution channels for their software.
  • [CREDENTIALS_UNSAFE]: The skill describes using the TILEDB_REST_TOKEN environment variable and rest.token configuration key for authentication with TileDB Cloud. This is a standard and secure method for handling API tokens; no sensitive credentials are hardcoded in the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external genomic data (VCF/BCF files) and user-supplied strings for genomic regions and sample names. While this represents a potential injection surface for untrusted data, the skill uses a dedicated C++ backend for parsing, and data is returned as structured objects (e.g., Pandas DataFrames), which mitigates the risk of instructions being executed as commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:36 PM