polars-bio
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the 'polars-bio' package (version 0.31.0) from the PyPI registry. This is a pinned dependency required for the skill's core functionality and is provided by the package maintainer.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides tools for reading and scanning genomic data files from both local and cloud storage (S3, GCS, Azure), presenting an attack surface for indirect prompt injection.\n
- Ingestion points: Untrusted data is introduced into the system through various parsers such as
read_vcf,scan_bam,read_bed, andread_gff, as well as via SQL queries on registered files.\n - Boundary markers: The skill documentation does not suggest or implement the use of markers, delimiters, or system-level instructions to ignore content when processing data from external bioinformatics files.\n
- Capability inventory: The skill has access to the local file system for reading and writing, can execute SQL queries via the DataFusion engine, and can access cloud storage using environmental security variables such as
AWS_ACCESS_KEY_ID.\n - Sanitization: The skill relies on the structured parsers of the underlying library (polars-bio/Arrow/DataFusion) but does not include application-level sanitization for individual data fields that could potentially contain natural language instructions.
Audit Metadata