bio-metagenomics-amr-detection
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python's subprocess module and shell scripts to invoke bioinformatic tools such as amrfinder and rgi. The Python implementation correctly passes arguments as a list, which is a secure practice to prevent shell injection vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process metagenomic sequencing data (FASTA/FASTQ files). While this represents a potential surface for processing untrusted data, the risk is mitigated by the domain-specific nature of the tools and lack of high-privilege operations.
- [EXTERNAL_DOWNLOADS]: The usage-guide.md includes instructions for installing tools via Bioconda and updating the NCBI Reference Gene Catalog using official commands. These are standard and legitimate maintenance operations in bioinformatics.
Audit Metadata