setup-singler-remote-tool
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the R runtime dependencies (SingleR, celldex, Matrix, jsonlite) from Bioconductor, a trusted bioinformatics repository. It also fetches an SDK from 'https://connect.aiscientist.tools/', which is the developer's infrastructure for this toolset. The URL includes a SHA-256 hash pin to ensure file integrity.
- [COMMAND_EXECUTION]: The skill executes local shell commands to create Python virtual environments, install packages via pip, and run R scripts. These are standard deployment procedures for data science tools. It also includes local validation scripts that verify the environment without model invocation.
- [CREDENTIALS_SAFE]: The skill demonstrates strong credential management practices. It explicitly instructs the user to keep credentials outside of Git, use protected environment variables for keys, and use a device-code flow (
tu remote login) that avoids manual key handling. It warns against printing tokens or passing them as command-line arguments.
Audit Metadata