anndata
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
anndatapackage and its ecosystem (such asscanpyandmuon) using theuv pippackage manager. These are well-established, standard libraries in the bioinformatics and scientific computing communities. - [INDIRECT_PROMPT_INJECTION]: The skill provides the ability to ingest and process data from various external file formats and remote sources, which represents a potential attack surface for indirect prompt injection if those files contain adversarial strings.
- Ingestion points: The skill reads data from external sources via
ad.read_h5ad,ad.read_csv,ad.read_zarr,ad.read_loom, andad.read_10x_h5as documented inSKILL.mdandreferences/io_operations.md. - Boundary markers: No specific delimiters or boundary markers are established to prevent the AI from interpreting data content (metadata strings) as instructions.
- Capability inventory: The skill possesses the capability to write files (
adata.write_h5ad) and perform network-based data retrieval usingfsspecandurllib. - Sanitization: There is no evidence of internal sanitization or validation mechanisms to filter potentially malicious instruction strings within the observation or variable metadata of the data matrices.
Audit Metadata