setup-cellrank-remote-tool
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the
tuplatform-connectSDK fromhttps://connect.aiscientist.tools. The analysis indicates this is the official distribution point for the vendor's relay tool and includes a SHA-256 hash verification (sha256=3fad5eee5ecf7887a693d93ccd1aa112dc0955617a885d1fc3daded0030f9ae0) to ensure file integrity. - [COMMAND_EXECUTION]: The skill uses several command-line operations for environment setup (
python -m venv,pip install) and tool management (tu remote share,tu serve). These are standard administrative tasks for deploying data science tools and occur within a user-controlled environment. - [CREDENTIALS_SAFE]: The instructions explicitly emphasize safe credential handling. It mandates using
.envfiles with 0600 permissions, warns against placing tokens in shell arguments or results, and utilizes an OAuth-style browser device flow (tu remote login) to avoid manual key handling. - [DATA_EXPOSURE]: The skill directs the storage of logs, caches, and weights into specific local directories (
caches/cellrank,runs/cellrank) and warns against including these in version control. It binds the tool toloopback(127.0.0.1) by default to prevent unauthorized network exposure.
Audit Metadata