pacsomatic
Warn
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/run_pacsomatic.pyscript utilizessubprocess.runto execute various system and scheduler commands, includingjava,bsub,sbatch, andqsub.- [COMMAND_EXECUTION]: The skill dynamically generates shell launch scripts tailored to the user's execution environment. These scripts are programmatically granted executable permissions usingos.chmod(..., 0o755)and subsequently executed.- [REMOTE_CODE_EXECUTION]: The helper script includes functionality to clone a remote Git repository. While configured for a well-known bioinformatics pipeline by default, the repository URL is a user-adjustable parameter.- [PROMPT_INJECTION]: The skill processes user-provided inputs such as BAM file paths and sample IDs that are used to build configuration files and shell commands, creating an attack surface for indirect prompt injection. - Ingestion points: Command-line arguments for tumor/normal BAM paths, sample metadata, and repository URLs in
scripts/run_pacsomatic.py. - Boundary markers: No specific delimiters or safety warnings are included in the instructions to separate untrusted data from processing logic.
- Capability inventory: File system write access, file permission modification, repository cloning, and shell command execution.
- Sanitization: Employs
shlex.quotefor shell command construction and uses a custom validator to prevent shell metacharacters in environment module commands.
Audit Metadata