scvelo
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes functionality to download demonstration datasets.
- Evidence: The script
scripts/rna_velocity_workflow.pyusesscv.datasets.pancreas()to fetch sample data from the official scVelo repository for testing and demonstration purposes. - [INDIRECT_PROMPT_INJECTION]: The skill processes external biological data files, which is a standard requirement for bioinformatics tools but introduces a theoretical attack surface for malicious metadata.
- Ingestion points: Data is loaded from
.loomand.h5adfiles usingscv.read()andsc.read_h5ad()inSKILL.mdand the workflow script. - Boundary markers: No explicit instruction delimiters or 'ignore' instructions are used when interpolating file metadata into the agent's context.
- Capability inventory: The skill can perform file system operations such as writing processed AnnData objects (
adata.write_h5ad) and saving visualization images. It does not have capabilities for arbitrary command execution or unauthorized network data exfiltration. - Sanitization: The skill relies on the standard parsing capabilities of the
scveloandscanpylibraries.
Audit Metadata