deeptools
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
scripts/workflow_generator.pyscript utilizes f-string templates to construct bash workflow scripts based on user-supplied parameters like file paths and thread counts. This dynamic assembly of executable shell scripts is a common pattern in scientific computing but represents a runtime code generation surface. - [COMMAND_EXECUTION]: Documentation in
SKILL.mdinstructs the user or agent to modify file permissions usingchmod +xon generated scripts and subsequently execute them (e.g.,./qc_workflow.sh). - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process genomic data files from potentially untrusted external sources (BAM, BED, bigWig).
- Ingestion points: The
scripts/validate_files.pyscript reads and parses BED files to validate coordinate integrity, and various tools described inreferences/tools_reference.mdprocess binary and tabular genomic data. - Boundary markers: There are no explicit instructions or delimiters used when the agent is prompted to process external data files to ignore embedded natural language instructions.
- Capability inventory: The skill facilitates extensive file system access and shell command execution via the generated bioinformatics workflows.
- Sanitization: While
scripts/validate_files.pyperforms basic format validation (e.g., verifying integer coordinates), it does not sanitize metadata or comment fields in genomic files for potential malicious instructions targeting an LLM context.
Audit Metadata