setup-depmap-24q2-remote-tool
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a package (
tuplatform-connect) from a remote URL:https://connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl. While the download includes a SHA-256 hash for integrity verification, the source is an external domain rather than a standard registry like PyPI. - [COMMAND_EXECUTION]: The instructions involve executing several shell commands, including environment setup (
venv), package installation (pip install), and running local server processes. It also uses python-in-shell scripts to interact with the local MCP (Model Context Protocol) endpoint. - [PROMPT_INJECTION]: The skill processes gene names (
BRAF,MAPK1) as inputs for scientific correlations. While these are legitimate scientific inputs, the ingestion of external data without explicit mention of sanitization or boundary markers creates a surface for indirect prompt injection if the tool output is later processed by an agent. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill requires setting environment variables like
DEPMAP_DATA_PATHand mentions the use ofTOOLUNIVERSE_SERVICE_KEY. While it advises using protected environments and 0600 file permissions for keys, the tool's purpose is to relay local data to a remote platform (ToolUniverse Connect), which is a form of data export by design.
Audit Metadata