nextflow
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts from the official domains for Nextflow (
https://get.nextflow.io) and nf-test (https://get.nf-test.com).\n- [COMMAND_EXECUTION]: The skill uses a shell pipe to execute remote scripts (curl | bash) for the setup of the Nextflow runtime and nf-test framework, which are standard installation methods for these tools.\n- [COMMAND_EXECUTION]: The instructions recommend usingsudoto move the Nextflow executable to a system-wide path (/usr/local/bin/), which is a common administrative task for CLI tool deployment.\n- [EXTERNAL_DOWNLOADS]: Software management is performed through reputable registries, including the installation ofnf-coreviapipand various workflow dependencies via the Bioconda and Conda-forge channels.\n- [REMOTE_CODE_EXECUTION]: The skill facilitates an indirect injection surface by teaching the agent to ingest external CSV data which is subsequently used in shell command construction.\n - Ingestion points: Data enters the environment from CSV samplesheets processed with
splitCsvinreferences/language.md.\n - Boundary markers: There are no markers or instructions provided to distinguish between data and potential commands within the processed files.\n
- Capability inventory: Nextflow
processblocks execute arbitrary Bash scripts using variables interpolated from the ingested data, as demonstrated inreferences/language.md.\n - Sanitization: No input validation or escaping procedures are described for the data extracted from samplesheets before it is used in command execution.
Audit Metadata