The Agent Skills Directory

Remote Script Execution Suggestion: The skill recommends installing Nextflow using the curl -s https://get.nextflow.io | bash pattern in both its documentation and environment check script. Executing remote scripts directly in the shell is a security consideration; however, this targets the official domain for a standard, well-known bioinformatics tool and is documented as a setup step for the user rather than an automated execution.
Privilege Escalation Instructions: The workflow suggests that users use sudo for environment configuration tasks, such as adding the current user to the Docker group or starting the Docker daemon. These are instructions provided to the user for local environment setup and are not directly executed by the skill itself, but they involve administrative privilege changes that should be performed with caution.
Indirect Prompt Injection Surface: The scripts/sra_geo_fetch.py script retrieves and displays metadata (titles and summaries) from external scientific databases (NCBI GEO/SRA). This represents an ingestion point for untrusted external data (Category 8). Evidence: (1) Ingestion points: scripts/sra_geo_fetch.py via metadata fetching; (2) Boundary markers: Absent; (3) Capability inventory: Subprocess calls for environment checks and genome management, network operations for data acquisition; (4) Sanitization: The script extracts structured fields but does not implement specific sanitization to prevent the interpolation of malicious instructions from the source metadata.
Command Execution Patterns: The skill utilizes subprocess.run in scripts like scripts/check_environment.py and scripts/manage_genomes.py to interact with local system tools such as Docker, Nextflow, and the AWS CLI. These calls are intended behaviors for verifying the environment and managing genomic references required for the bioinformatics pipelines.

nextflow-development