arboreto
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
arboretolibrary and its dependencies (scipy,scikit-learn,numpy,pandas,dask,distributed) from standard package registries. These are well-known libraries in the scientific and data science communities. - [COMMAND_EXECUTION]: The skill provides a dedicated Python script (
scripts/basic_grn_inference.py) and various code examples designed to be executed in a local or distributed Python environment to process genomic data. - [INDIRECT_PROMPT_INJECTION]: The skill processes gene expression data from external TSV files, representing a potential surface for indirect prompt injection if the resulting data or logs are interpreted by an LLM.
- Ingestion points: Untrusted external data is ingested via
pd.read_csvinscripts/basic_grn_inference.pyand other workflow examples. - Boundary markers: The skill does not implement specific boundary markers or instructions to ignore embedded prompts within the input data files.
- Capability inventory: The skill possesses the capability to write files to the local disk and establish network connections via Dask clients.
- Sanitization: No specific sanitization or validation is applied to gene names or metadata within the input TSV files before they are processed or displayed.
Audit Metadata