gtars

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides functionality to fetch genomic data from Bedbase (bedbase.org), a well-known and legitimate bioinformatics service, via the gtars bbcache fetch command documented in references/cli.md.
  • [COMMAND_EXECUTION]: The instructions describe the installation and use of the gtars and gtars-cli tools for genomic processing. These operations are essential for the primary purpose of the skill and utilize standard package managers like uv, pip, and cargo as seen in SKILL.md and references/cli.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external genomic data formats such as BED, FASTA, and TSV files. Ingestion points: Genomic data is ingested through RegionSet.from_bed, RefgetStore.from_fasta, and TreeTokenizer.from_bed_file across multiple reference files. Boundary markers: There are no explicit instructions for the agent to treat file content as untrusted or to use delimiters when parsing data. Capability inventory: The skill possesses the capability to write to the file system (to_bed, to_json) and execute shell commands via the gtars CLI. Sanitization: No specific input validation or sanitization routines for the content of processed genomic files are mentioned in the documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 12:15 PM