flowio

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate utility for life-sciences bioinformatics, focused on the Flow Cytometry Standard (FCS) 2.0-3.1. It performs all operations locally and requires no network access for runtime parsing.\n- [EXTERNAL_DOWNLOADS]: The skill pins its primary dependency to flowio==1.4.0 and installs it via uv from official package registries. References point to official documentation and verified source code repositories.\n- [DATA_EXFILTRATION]: The instructions include specific sections on privacy and clinical metadata, advising users to treat FCS TEXT segments as potentially identifying and to use allowlists for metadata export. There are no mechanisms detected that transmit data to external servers.\n- [COMMAND_EXECUTION]: The provided scripts/inspect_fcs.py utility runs locally to perform file inventories. It includes safety features such as max-bytes and max-array-bytes to prevent denial-of-service through resource exhaustion when parsing large or malformed binary files.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (FCS files). While it extracts metadata that could theoretically contain malicious instructions, the skill does not use this data in a way that allows for command execution or agent override. It treats metadata as literal strings and emphasizes validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 04:16 PM