cli-cytoscnpy
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local environment by executing
cytoscnpysubcommands for code analysis and project initialization. Thecytoscnpy initcommand modifies local files, specifically creating or appending to.cytoscnpy.tomlorpyproject.toml. - [INDIRECT_PROMPT_INJECTION]: The skill processes project source code, creating an indirect prompt injection surface.
- Ingestion points:
cytoscnpysubcommands (raw, cc, hal, mi, stats, table) read Python files from a user-provided<PATH>(found in SKILL.md and references/cli-reference.md). - Boundary markers: None specified in the instructions to separate metrics output from the agent's instruction stream.
- Capability inventory: The skill invokes the
cytoscnpyCLI for metric calculation and file modification via theinitsubcommand (found in SKILL.md and references/cli-reference.md). - Sanitization: No content sanitization of the analyzed source code is described.
Audit Metadata