setup-scvelo-remote-tool
Warn
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to download a Python wheel file for the ToolUniverse Connect relay from the domain 'https://connect.aiscientist.tools/'.
- [REMOTE_CODE_EXECUTION]: The installation of a pre-compiled wheel (.whl) from an external URL involves the execution of code from a remote source. Although the skill provides a SHA-256 hash for integrity verification, the binary is not hosted on a standard public package registry.
- [COMMAND_EXECUTION]: The setup process involves multiple shell commands for environment configuration, library installation, and starting local servers, including 'pip install', 'tu remote login', and 'tu serve'.
- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it is designed to process external biological data files.
- Ingestion points: The 'run_scvelo_velocity' tool processes .h5ad files (e.g., 'tiny.h5ad') containing genomic data.
- Boundary markers: The instructions provide manual guidelines for users to verify output for the absence of 'paths, secrets, and traces', but no automated boundary enforcement is specified.
- Capability inventory: The skill possesses the capability to communicate over the network via a relay service and interact with the local file system.
- Sanitization: There is no mention of automated sanitization, schema validation, or filtering for the data layers processed by the tool.
Audit Metadata