gget

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the gget library to interact with over 20 well-known genomic databases, including Ensembl, UniProt, and NCBI. These external connections are essential for the skill's primary purpose of biological data analysis and retrieval.
  • [COMMAND_EXECUTION]: The documentation provides standard instructions for managing the environment using uv and pip. It also includes examples of shell-based bioinformatics pipelines, such as using kallisto for indexing transcriptomes, which are routine in computational biology.
  • [CREDENTIALS_UNSAFE]: Specific modules like gget gpt and gget cosmic require API keys or account credentials. The documentation correctly identifies these requirements and provides placeholders (your_key_here, xxx), encouraging users to manage their secrets securely rather than hardcoding them.
  • [REMOTE_CODE_EXECUTION]: The workflow documentation provides a code example for caching results using Python's pickle module. While this is a common practice in scientific computing for local data persistence, users should be aware that pickle.load can be a security risk if the cache files are manipulated by an attacker; however, in this context, it is presented as a standard tool for local performance optimization.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 05:40 PM