gtars
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides functionality to fetch genomic data from Bedbase (bedbase.org), a well-known and legitimate bioinformatics service, via the
gtars bbcache fetchcommand documented inreferences/cli.md. - [COMMAND_EXECUTION]: The instructions describe the installation and use of the
gtarsandgtars-clitools for genomic processing. These operations are essential for the primary purpose of the skill and utilize standard package managers likeuv,pip, andcargoas seen inSKILL.mdandreferences/cli.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external genomic data formats such as BED, FASTA, and TSV files. Ingestion points: Genomic data is ingested through
RegionSet.from_bed,RefgetStore.from_fasta, andTreeTokenizer.from_bed_fileacross multiple reference files. Boundary markers: There are no explicit instructions for the agent to treat file content as untrusted or to use delimiters when parsing data. Capability inventory: The skill possesses the capability to write to the file system (to_bed,to_json) and execute shell commands via thegtarsCLI. Sanitization: No specific input validation or sanitization routines for the content of processed genomic files are mentioned in the documentation.
Audit Metadata