setup-macs3-remote-tool

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation for deploying a bioinformatics tool (MACS3) as a remote MCP (Model Context Protocol) tool.
  • [EXTERNAL_DOWNLOADS]: It installs dependencies from a remote URL (connect.aiscientist.tools). This is a well-known domain for this specific ecosystem, and the installation command includes a SHA-256 hash pin (sha256=3fad5eee...) to ensure the integrity of the downloaded file.
  • [COMMAND_EXECUTION]: The skill uses python3 -m venv for environment isolation and standard pip install commands. It includes localized script execution for validation (setup_skill_preflight.py), which is an expected part of the setup process.
  • [CREDENTIALS_SAFE]: The instructions explicitly warn against including API tokens in shell arguments or results, advising the use of environment variables or protected configuration files (0600 permissions). It also promotes the use of short-lived device codes for authentication rather than static long-lived keys.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 08:20 AM
Security Audit — agent-trust-hub — setup-macs3-remote-tool