nextflow
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download the Nextflow and nf-test installation scripts from their respective official domains:
https://get.nextflow.ioandhttps://get.nf-test.com. These are well-known services and the standard distribution methods for these tools. - [REMOTE_CODE_EXECUTION]: Setup instructions guide the user to execute shell scripts downloaded from official, well-known domains (e.g.,
bash < install-nextflow.sh). This is standard setup behavior for the Nextflow engine and does not constitute a malicious execution pattern. - [COMMAND_EXECUTION]: The skill utilizes shell commands to manage pipeline environments, install the
nf-coreCLI viauv, and execute scientific workflows either locally or through cluster executors like SLURM.
Audit Metadata