scvi-tools
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted single-cell data loaded from various file formats (.h5ad, .csv, Visium), which serves as an ingestion point for data that could contain malicious instructions embedded in metadata or feature names.
- Ingestion points: The skill frequently uses data loading functions such as
sc.read_h5ad,sc.read_csv,sc.read_10x_mtx, andsc.read_visiumacross its reference documentation. - Boundary markers: No specific delimiting instructions or warnings to ignore embedded content within ingested data are provided.
- Capability inventory: The skill utilizes capabilities for file system writes (
model.save,adata.write,de_results.to_csv) and performs network fetches (add_dna_sequence, arXiv metadata fetch). - Sanitization: There is no evidence of data validation or sanitization of observation metadata or feature names before they are processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill provides procedures for downloading genomic references and scientific datasets from well-known repositories.
- The function
scvi.data.add_dna_sequenceis used withinstall_genome=Trueto download large genomic data files (e.g., hg38). - Tutorial datasets are fetched via
scvi.data.heart_cell_atlas_subsampled. - The skill documentation describes fetching publication metadata from
export.arxiv.orgfor citation formatting. - [COMMAND_EXECUTION]: The skill instructs the user or agent to execute shell commands for environment preparation and dependency management.
- Standard commands like
uv pip install scvi-toolsanduv pip install "scvi-tools[cuda]"are used for installation.
Audit Metadata