pydeseq2-differential-expression
Warn
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a recipe for data persistence using the
picklemodule (pickle.load). Deserializing data from untrusted pickle files is a known security risk that can lead to arbitrary code execution.\n- [PROMPT_INJECTION]: The skill ingests external data from CSV files (counts.csvandmetadata.csv). While this constitutes a data ingestion surface for indirect prompt injection, the risk is limited as the data is used for statistical modeling and visualization rather than being interpreted as instructions by the agent.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes several standard Python packages includingpydeseq2,matplotlib, andseabornwhich are instructed to be installed viapip. These are well-known and trusted libraries within the bioinformatics and data science communities.\n- [SAFE]: No evidence of hardcoded credentials, malicious network requests, obfuscation, or persistence mechanisms was found in the analyzed skill file.
Audit Metadata