flowio
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate utility for life-sciences bioinformatics, focused on the Flow Cytometry Standard (FCS) 2.0-3.1. It performs all operations locally and requires no network access for runtime parsing.\n- [EXTERNAL_DOWNLOADS]: The skill pins its primary dependency to
flowio==1.4.0and installs it viauvfrom official package registries. References point to official documentation and verified source code repositories.\n- [DATA_EXFILTRATION]: The instructions include specific sections on privacy and clinical metadata, advising users to treat FCS TEXT segments as potentially identifying and to use allowlists for metadata export. There are no mechanisms detected that transmit data to external servers.\n- [COMMAND_EXECUTION]: The providedscripts/inspect_fcs.pyutility runs locally to perform file inventories. It includes safety features such asmax-bytesandmax-array-bytesto prevent denial-of-service through resource exhaustion when parsing large or malformed binary files.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (FCS files). While it extracts metadata that could theoretically contain malicious instructions, the skill does not use this data in a way that allows for command execution or agent override. It treats metadata as literal strings and emphasizes validation.
Audit Metadata