genomeark-aws
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Python
subprocessmodule to executeaws s3CLI commands for listing directories and copying files from the GenomeArk public bucket. - [EXTERNAL_DOWNLOADS]: Fetches genomic assemblies, QC reports, and k-mer histograms from the well-known Amazon Web Services (AWS) S3 service via the public
s3://genomeark/bucket. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, including S3 filenames and text files such as BUSCO and GenomeScope summaries. It parses this untrusted external data to extract metrics using regular expressions and type conversion, which represents a potential injection surface.
- Ingestion points: S3 filenames and the content of evaluation report files (e.g.,
_genomescope__Summary.txt,output_merqury.tabular) inqc-data-fetching.mdandassembly-date-extraction.md. - Boundary markers: None identified.
- Capability inventory:
subprocess.runfor executing AWS CLI commands and writing files to the local directory. - Sanitization: Uses regular expression matching, string splitting, and numerical type conversion (
int,float) to validate scientific data extracted from external reports.
Audit Metadata