mageck
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the procedure for downloading and installing the MAGeCK source package from SourceForge, a well-known hosting service for open-source software. This download is intended for the manual setup of the execution environment.\n- [COMMAND_EXECUTION]: The helper script
scripts/screen_analysis.pyexecutes themageckbinary viasubprocess.run(). It utilizes list-based argument passing, which is a secure practice that prevents shell injection by ensuring sample labels and file paths are not interpreted as shell commands.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external biological data files (count matrices and libraries) which represent an untrusted data surface.\n - Ingestion points: Data is loaded from user-supplied TSV files within
scripts/screen_analysis.py.\n - Boundary markers: The skill does not employ specific delimiters or prompt-level instructions to ignore potential commands embedded in data.\n
- Capability inventory: The script is capable of writing reports to the file system and executing the external
mageckanalysis binary.\n - Sanitization: The script performs data validation, including checking that counts are non-negative integers and that DNA sequences contain only valid bases (ACGT).
Audit Metadata