omero-integration

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill primarily consists of documentation and code snippets for the omero-py library. It emphasizes secure practices, such as using environment variables for credentials and context managers for session lifecycle management, consistent with official OMERO developer guidelines.
  • [PROMPT_INJECTION]: The skill exposes the agent to external data by providing methods to retrieve image metadata, tags, and annotations from an OMERO server. This creates a surface for indirect prompt injection where an attacker could place malicious instructions in data fields to be processed by the agent. This is an inherent risk of data-processing integrations and is documented here as a potential attack surface rather than an active vulnerability.
  • [COMMAND_EXECUTION]: The documentation describes the creation and deployment of OMERO.scripts for server-side batch processing. While this involves executing Python code on a remote server, it is a core feature of the OMERO platform designed for microscopy analysis workflows, and the examples provided adhere to the platform's security model.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 03:10 AM