alterlab-tiledbvcf
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install
tiledbvcf-pyfrom the officialtiledbAnaconda channel and references Docker images from thetiledb/repository on Docker Hub. TileDB is a well-known data management company, and these are standard distribution channels for their software. - [CREDENTIALS_UNSAFE]: The skill describes using the
TILEDB_REST_TOKENenvironment variable andrest.tokenconfiguration key for authentication with TileDB Cloud. This is a standard and secure method for handling API tokens; no sensitive credentials are hardcoded in the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes external genomic data (VCF/BCF files) and user-supplied strings for genomic regions and sample names. While this represents a potential injection surface for untrusted data, the skill uses a dedicated C++ backend for parsing, and data is returned as structured objects (e.g., Pandas DataFrames), which mitigates the risk of instructions being executed as commands.
Audit Metadata