cellxgene-census
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill utilizes well-known and reputable scientific Python packages including
cellxgene-census,scanpy,anndata, andtiledbsomafor biological data retrieval and analysis. - [SAFE]: Network operations are exclusively directed toward official CZ CELLxGENE Census endpoints to fetch public transcriptomics data, which is the primary and intended function of the skill.
- [SAFE]: Analysis of the code patterns for querying, machine learning integration (via
tiledbsoma-ml), and spatial data processing reveals standard API usage with no evidence of obfuscation or malicious intent. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of cell metadata and gene expression data from external scientific sources. While this represents a data-processing attack surface, the risk is minimal given the structured nature of the data and the reputation of the source.
- Ingestion points:
cellxgene_census.get_obs(),cellxgene_census.get_anndata(), andaxis_query()methods used inSKILL.mdand reference files. - Boundary markers: Absent; the skill relies on library-level parsing of structured scientific data.
- Capability inventory: The skill is configured with
Read,Write,Edit, andBashtools. - Sanitization: Data is processed as structured AnnData or SOMA objects by standard scientific libraries; no specific prompt-level sanitization of ingested metadata is present.
Audit Metadata