scvi-tools
Warn
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses dynamic execution to load its own helper functions into the agent's environment. * Evidence: The setup instructions in
SKILL.mdrecommend runningexec(open("scvi-tools/kernel.py").read()). - [REMOTE_CODE_EXECUTION]: The skill provides instructions for delegating computation to external remote platforms. * Evidence:
SKILL.mdincludes a code example for using the Modal serverless GPU platform (modal run pipeline.py). - [EXTERNAL_DOWNLOADS]: The skill requires the installation of several external Python dependencies from public registries. * Evidence:
SKILL.mdspecifies installation ofscvi-tools,scanpy, andanndatavia pip. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by processing external genomic data files. * Ingestion points: External
.h5adfiles are read usingsc.read_h5adin bothSKILL.mdand the providedpipeline.pyscript. * Boundary markers: There are no explicit markers or instructions provided to the agent to treat data content as non-instructional. * Capability inventory: The skill performs file system operations, dynamic script execution viaexec, and network-based execution through external CLI tools. * Sanitization: Content from the data files is processed without validation or sanitization.
Audit Metadata