pathway-enrichment
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill implements standard bioinformatics workflows using widely-accepted scientific libraries and practices. All components are transparent and well-documented.
- [EXTERNAL_DOWNLOADS]: The skill fetches gene-set data and performs analysis using official APIs from trusted scientific organizations.
- Fetches data from Enrichr (Ma'ayan Lab), g:Profiler (University of Tartu), and MSigDB (Broad Institute).
- Utilizes the
gseapyandgprofiler-officialPython packages, which are reputable tools in the bioinformatics community. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as gene lists and expression matrices, which is its primary purpose.
- Ingestion points: Files read via
scripts/run_enrichment.py(--genes,--deseq2,--rnk,--background) and gene lists passed togseapyfunctions. - Boundary markers: None explicitly present for instruction isolation, but data is treated as structured bioinformatics input.
- Capability inventory: Network requests to enrichment APIs and local file system writes for results and plots.
- Sanitization:
scripts/run_enrichment.pyperforms gene symbol normalization, deduplication, and numeric coercion of scores. - [COMMAND_EXECUTION]: The provided Python script
scripts/run_enrichment.pyperforms legitimate, documented data analysis tasks. It does not use unsafe execution functions likeeval()orexec(), nor does it spawn unauthorized shell commands.
Audit Metadata