gget-genomic-databases
Warn
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The
cosmicmodule asks for user credentials (email and password) as plaintext function arguments. Similarly, thegptmodule requires an OpenAI API key. This approach can lead to credentials being exposed in code repositories or command history. - [EXTERNAL_DOWNLOADS]: The skill automates the retrieval of large datasets and reference genomes from trusted scientific organizations such as Ensembl and the Sanger Institute.
- [COMMAND_EXECUTION]: Workflow examples demonstrate the use of the Python
subprocessmodule to execute external bioinformatics tools likekb-python, which represents a vector for arbitrary command execution. - [DATA_EXFILTRATION]: Through the
gptmodule, research data and genomic sequences may be transmitted to the OpenAI platform. - [REMOTE_CODE_EXECUTION]: The
setupcommands for modules likealphafoldandcellxgenedownload and install external binaries and Python packages, executing installation scripts from remote sources.
Audit Metadata