setup-monocle3-remote-tool
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation instructions fetch the Monocle 3 R package from the official lab repository on GitHub (
cole-trapnell-lab/monocle3) and a Python wheel fortuplatform-connectfromconnect.aiscientist.tools. - Evidence:
remotes::install_github("cole-trapnell-lab/monocle3")inSKILL.md. - Evidence:
pip install ... "tuplatform-connect @ https://connect.aiscientist.tools/downloads/..."inSKILL.md. - Note: The Python wheel is pinned with a SHA-256 hash to verify the integrity of the downloaded binary.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions to ingest and process biological data files (e.g.,
.h5ad) which can potentially contain embedded instructions if the data source is untrusted. - Ingestion points: The
adata_pathparameter in therun_monocle3_pseudotimetool invocation (documented inSKILL.md). - Boundary markers: No specific boundary markers or delimiters for the data content are defined in the tool invocation examples.
- Capability inventory: The skill facilitates execution of complex R-based bioinformatics analysis via MCP tools.
- Sanitization: The instructions recommend verifying input licenses and caution against using arbitrary caller-supplied model paths.
Audit Metadata