neuropixels-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads pretrained machine learning models from Hugging Face repositories (e.g.,
SpikeInterface/UnitRefine_noise_neural_classifier) and refers to scientific packages hosted on GitHub and official registries. These downloads target well-known services and reputable scientific organizations. - [DYNAMIC_EXECUTION]: The skill utilizes the
skopslibrary to load serialized machine learning models for unit classification. This dynamic loading process requires thetrust_model=Trueflag. The documentation inreferences/AUTOMATED_CURATION.mdincludes explicit security warnings, advising users to treat these models as executable artifacts and only load them from trusted sources. - [INDIRECT_PROMPT_INJECTION]: The skill supports AI-assisted curation by sending rendered plots of neural data to vision-language models. This introduces a surface where processed recording data can influence agent behavior.
- Ingestion points: Data is ingested via
si.read_spikeglx,si.read_openephys, andsi.read_nwb(documented inSKILL.mdandscripts/neuropixels_pipeline.py). - Boundary markers: The prompt used for AI curation (found in
references/AI_CURATION.md) does not use explicit boundary markers to separate the visual content from the classification instructions. - Capability inventory: The skill has capabilities to execute subprocesses (via
si.run_sorter), manage files, and perform network requests to AI APIs and model registries. - Sanitization: There is no evidence of specific sanitization or filtering applied to the generated visualizations before they are processed by the AI models.
Audit Metadata