polars-bio
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external bioinformatics files (VCF, BED, BAM, etc.) which serve as an untrusted data ingestion surface.\n
- Ingestion points: Functions like
read_bed,scan_vcf,read_bam, andread_tableinSKILL.mdandreferences/file_io.mdingest external data into the agent's context.\n - Boundary markers: Absent. There are no instructions to the agent to delimit or ignore instructions that might be embedded in data fields (e.g., BED names or VCF metadata).\n
- Capability inventory: The skill has access to the
Bashtool and performs cloud storage operations (S3, GCS, Azure) and file writing (references/file_io.md).\n - Sanitization: No sanitization or validation of data content is mentioned before it is processed by the agent or SQL engine.\n- [EXTERNAL_DOWNLOADS]: The skill installs a specific version of a bioinformatics library from a public registry.\n
- Evidence:
uv pip install "polars-bio==0.31.0"inSKILL.md. This represents a standard installation of a pinned package version from a well-known service.
Audit Metadata