cellxgene-census
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install standard bioinformatics packages including cellxgene-census, tiledbsoma-ml, and spatialdata via uv pip. It also references citation metadata from ArXiv, a well-known scientific service.
- [COMMAND_EXECUTION]: The skill includes shell commands for setting up the environment and installing required Python dependencies.
- [INDIRECT_PROMPT_INJECTION]: The instructions for citing the skill involve fetching and parsing metadata from an external URL (ArXiv). This creates an ingestion surface for untrusted external data.
- Ingestion points: SKILL.md (Citation instructions fetching ArXiv content).
- Boundary markers: The instructions do not specify any boundary markers or ignore-rules for the fetched content.
- Capability inventory: The skill uses the Bash tool and performs network operations to retrieve the citation data.
- Sanitization: No explicit sanitization or validation of the fetched metadata is mentioned.
Audit Metadata