phylogenetics
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
subprocessmodule to run local bioinformatics binaries like MAFFT, IQ-TREE 2, and FastTree. - All command execution calls use list-based arguments rather than string interpolation, which effectively prevents shell injection vulnerabilities.
- Parameters and file paths are handled as discrete arguments in the subprocess list.
- [EXTERNAL_DOWNLOADS]: The documentation provides installation instructions for necessary dependencies via standard package managers.
- Dependencies such as
mafft,iqtree, andfasttreeare recommended from thebiocondachannel. - The Python library
ete3is recommended viapip. - These are well-established tools in the genomics and evolutionary biology communities.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external sequence data in FASTA format.
- Analysis confirms that this data is passed directly to specialized binaries (MAFFT, etc.) which treat the sequences as raw data.
- The skill does not interpolate untrusted sequence content into prompts for the AI agent, mitigating injection risks.
Audit Metadata