omero-integration
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill primarily consists of documentation and code snippets for the
omero-pylibrary. It emphasizes secure practices, such as using environment variables for credentials and context managers for session lifecycle management, consistent with official OMERO developer guidelines. - [PROMPT_INJECTION]: The skill exposes the agent to external data by providing methods to retrieve image metadata, tags, and annotations from an OMERO server. This creates a surface for indirect prompt injection where an attacker could place malicious instructions in data fields to be processed by the agent. This is an inherent risk of data-processing integrations and is documented here as a potential attack surface rather than an active vulnerability.
- [COMMAND_EXECUTION]: The documentation describes the creation and deployment of OMERO.scripts for server-side batch processing. While this involves executing Python code on a remote server, it is a core feature of the OMERO platform designed for microscopy analysis workflows, and the examples provided adhere to the platform's security model.
Audit Metadata