integrative-DMR-DEG
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
awkutility in Step 1 to transform input data into a BED format. This involves executing a shell command to process the contents ofdmr_results.txt. While the command logic is fixed, it utilizes the agent's capability to run shell instructions on local files. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks due to the processing of external, untrusted data files.
- Ingestion points: The agent reads and processes data from
dmr_results.txtanddge_result.csv. - Boundary markers: The instructions do not define boundary markers or delimiters to isolate file content from the agent's instruction stream.
- Capability inventory: The skill possesses capabilities for file system access, shell command execution via
awk, and the invocation of multiple data integration tools. - Sanitization: There is no evidence of content sanitization or validation for the input files before they are processed by the workflow.
Audit Metadata