scanpy-scrna-seq
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external genomic data files (e.g., .h5ad, .mtx, .csv). While these are standard formats for biological data, processing untrusted external files represents a potential surface for indirect prompt injection if the data contains adversarial content intended to influence the agent's behavior during analysis.
- Ingestion points: Data loading functions such as
sc.read_10x_mtx,sc.read_h5ad, andsc.read_csvinSKILL.mdandreferences/api_reference.md. - Boundary markers: Not present in the provided snippets.
- Capability inventory: The skill utilizes Python execution environment with capabilities for local file system read/write (e.g.,
adata.write,to_csv) and data visualization. - Sanitization: No explicit sanitization of data values is performed beyond standard library parsing.
- [EXTERNAL_DOWNLOADS]: The documentation includes standard installation instructions for well-known scientific Python packages via PyPI.
- Evidence:
pip install "scanpy[leiden]" anndatainSKILL.md.
Audit Metadata