nextflow
Fail
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes the standard installation command for the Nextflow engine using
curl -s https://get.nextflow.io | bashinSKILL.md. This is the official installation method for a well-known scientific workflow platform. - [EXTERNAL_DOWNLOADS]: The skill references the installation of
nf-coreviauv pipandnextflowviacondafrom thebiocondaandconda-forgechannels. It also describes mechanisms for downloading remote pipelines from GitHub usingnextflow pullandnextflow run <user/repo>. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external and untrusted data, which presents a surface for indirect prompt injection.
- Ingestion points: The agent is instructed to run and develop Nextflow pipelines that ingest data from
.nfscripts,nextflow.configfiles, and CSV samplesheets (described inSKILL.mdandreferences/running-pipelines.md). - Boundary markers: There are no explicit instructions for the agent to treat input files with specific delimiters or to ignore potential instructions embedded within data files.
- Capability inventory: The skill provides the ability to execute shell scripts through the
nextflowruntime and perform network operations to fetch remote assets. - Sanitization: The skill relies on the inherent isolation provided by the Nextflow runtime, such as per-task work directories and containerization (Docker/Singularity).
Recommendations
- HIGH: Downloads and executes remote code from: https://get.nextflow.io - DO NOT USE without thorough review
Audit Metadata