setup-slingshot-remote-tool
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads biological analysis packages (
slingshot,Matrix,jsonlite) usingBiocManager. This is standard practice in bioinformatics and targets the official Bioconductor repository. - [EXTERNAL_DOWNLOADS]: The skill installs a Python package from a remote wheel file
https://connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl. This resource belongs to the vendor's infrastructure (aiscientist.tools) and includes a pinned SHA-256 hash (3fad5eee...) for integrity verification, which is a security best practice. - [COMMAND_EXECUTION]: The skill uses local shell commands to create virtual environments, install packages, and launch local MCP (Model Context Protocol) servers. These are standard development operations.
- [DATA_EXFILTRATION]: The skill documentation explicitly warns against hardcoding credentials (
TOOLUNIVERSE_API_TOKEN) and instructs users to keep secrets outside of Git, demonstrating safe credential handling practices.
Audit Metadata