bio-assembly-qc
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
run_assembly_qc.pyscript executes external bioinformatics software such as SPAdes, Flye, metaMDBG, and QUAST usingsubprocess.run. The commands are constructed using a whitelist of tools and validated input paths from the assembly manifest.\n- [EXTERNAL_DOWNLOADS]: Documentation in thedocs/directory provides links to official GitHub repositories and websites for the assembly tools (e.g., SPAdes, Flye, Autocycler, QUAST). These references are for documentation and installation guidance and target well-known academic and open-source project locations.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could influence its actions.\n - Ingestion points:
run_assembly_qc.pyreads data from theassemblies.tsvmanifest file.\n - Boundary markers: Data is ingested via a structured TSV format; however, there are no explicit instructions to the agent to ignore embedded instructions within the fields.\n
- Capability inventory: The skill can execute command-line tools via
subprocess.run(inrun_assembly_qc.py) and write files to the output directory.\n - Sanitization: The script performs validation on input paths (using
resolve_file), checks modes against a defined set (MODES), and ensures uniquesample_idvalues to prevent injection of malicious arguments.
Audit Metadata