omero-integration
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external OMERO servers, including image metadata, tags, comments, and tabular data, which could potentially contain malicious instructions if the server is compromised or contains untrusted content.
- Ingestion points: Data retrieval methods documented in
references/data_access.md,references/metadata.md, andreferences/tables.md(e.g.,conn.getObject,ann.listAnnotations,table.read). - Boundary markers: None identified in the provided code examples or instructions.
- Capability inventory: The skill documents local file writing (
references/advanced.md,references/image_processing.md) and the ability to upload and execute scripts on the remote OMERO server (references/scripts.md). - Sanitization: No specific sanitization or validation of retrieved metadata strings is shown in the examples.
- [REMOTE_CODE_EXECUTION]: The skill documents the OMERO.scripts framework in
references/scripts.md, which allows users to upload Python scripts to the OMERO server for remote execution. While this is a core feature of the OMERO platform, it represents a significant capability for remote code execution. - [COMMAND_EXECUTION]: The documentation includes examples of interacting with the local file system using Python's
osandopenfunctions to save images and download data from the server, as seen inreferences/advanced.mdandreferences/image_processing.md.
Audit Metadata