polars-bio
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes various genomic data formats such as VCF, BAM, and FASTA which ingest external content into the agent context. This surface is mitigated by instructions to validate assembly bounds, contig naming, and schemas before analysis. Mandatory evidence: 1) Ingestion points include the format-specific readers in file_io.md. 2) Boundary markers are requested through coordinate and metadata validation steps. 3) Capabilities include file writing and SQL execution. 4) Sanitization is addressed by specific warnings against SQL interpolation.
- [COMMAND_EXECUTION]: The skill uses the Bash tool for environment setup, specifically using the uv package manager to install pinned versions of the polars-bio and polars libraries.
- [EXTERNAL_DOWNLOADS]: Core components and documentation are retrieved from well-known platforms including PyPI, GitHub, and arXiv. These operations are documented for transparency and are necessary for the skill's bioinformatics functionality.
Audit Metadata