pydeseq2
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill demonstrates the use of the
picklemodule for serializing and deserializing analysis objects to and from local storage. Inreferences/workflow_guide.md, code examples includepickle.load()to restore data states. Deserialization of untrusted data using thepicklemodule can lead to arbitrary code execution if the source file is malicious. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in CSV and TSV formats for gene expression analysis, creating a surface for indirect prompt injection.
- Ingestion points: Data is loaded from user-provided paths in
scripts/run_deseq2_analysis.pyandSKILL.mdusingpd.read_csv(). - Boundary markers: Absent; the skill does not use delimiters or instructions to ignore embedded content within the data files.
- Capability inventory: The skill has the ability to write files to the local system (
to_csv,pickle.dump) and generate visualization plots. - Sanitization: There is no explicit sanitization or content validation of the input data files beyond checking for non-negative integers and index alignment.
Audit Metadata