skills/freedomintelligence/openclaw-medical-skills/bio-causal-genomics-colocalization-analysis/Gen Agent Trust Hub
bio-causal-genomics-colocalization-analysis
Warn
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the 'hyprcoloc' R package directly from a third-party GitHub repository ('jrs95/hyprcoloc') using 'remotes::install_github'. This allows for the download and execution of code that is not hosted on a standard repository like CRAN or Bioconductor.
- [COMMAND_EXECUTION]: The documentation and code examples suggest the use of the 'plink' command-line utility for generating linkage disequilibrium (LD) matrices. If executed, the agent would be running external binary tools on the local system.
- [PROMPT_INJECTION]: The skill processes GWAS and eQTL summary statistics provided as data frames or read from files, which constitutes an indirect prompt injection surface where malicious instructions could be embedded in the data.
- [PROMPT_INJECTION_EVIDENCE]: * Ingestion points: GWAS data frames (gwas_df), eQTL data frames (eqtl_df), and external LD matrix files (ld_matrix.txt). * Boundary markers: None present in the code examples or instructions to delimit untrusted data from the prompt. * Capability inventory: File system read (read.table), file system write (ggsave), and shell command execution (plink). * Sanitization: No explicit sanitization or validation of the input data is performed before processing or plotting.
Audit Metadata