snakemake-workflow-engine
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation provides instructions and examples for defining rules that execute shell commands using the
shell:directive. This is the primary mechanism for Snakemake to automate external tools likebwa,samtools, andfastp. - [DYNAMIC_EXECUTION]: The documentation describes features for executing inline Python code via
run:blocks and external R, Python, or Julia scripts via thescript:directive. These capabilities allow for runtime script generation and execution based on workflow parameters. - [INDIRECT_PROMPT_INJECTION]: The skill outlines a workflow system that processes untrusted external data and configuration files.
- Ingestion points: The agent processes user-provided
Snakefilerules,config/config.yamlsettings, and external data files (e.g., FASTQ, BAM). - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are demonstrated in the examples.
- Capability inventory: The defined workflows include capabilities for file system operations, tool invocation, and network access (demonstrated via
wgetfor downloading reference data). - Sanitization: The examples do not include sanitization or validation steps for input data or configuration values before they are interpolated into shell commands or script logic.
Audit Metadata