vcf-variant-filtering
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of VCF (Variant Call Format) files which are untrusted external data sources. Maliciously crafted VCF headers or data records could contain instructions intended to override or influence the agent's behavior.
- Ingestion points: The skill ingest data from
input.vcfusing commands likebcftools view -handbcftools query. - Boundary markers: There are no instructions to use delimiters or ignore embedded instructions when reading or processing VCF content.
- Capability inventory: The skill utilizes tools such as
bcftools,awk, andgrepwhich possess file reading and data manipulation capabilities. - Sanitization: The instructions do not include steps for sanitizing or validating the content of the VCF file for potential prompt injection payloads before processing.
Audit Metadata