setup-transcriptformer-remote-tool

Warn

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a Python wheel file (tuplatform_connect-0.3.0-py3-none-any.whl) from an external domain https://connect.aiscientist.tools/downloads/. While the download is SHA-256 pinned, the domain is not a standard package registry.
  • [REMOTE_CODE_EXECUTION]: The externally downloaded Python wheel is installed using pip, which involves the execution of the package's setup and runtime code.
  • [COMMAND_EXECUTION]: The skill utilizes heredocs to execute local Python scripts (e.g., `python
  • <<'PY' ...`) to validate local MCP (Model Context Protocol) tool discovery and functionality.
  • [INDIRECT_PROMPT_INJECTION]: The setup facilitates the creation of a tool (run_transcriptformer_embedding_retrieval) that processes biological data, creating a potential surface for indirect injection.
  • Ingestion points: The run_transcriptformer_embedding_retrieval tool accepts JSON arguments including gene_names and disease which are processed by the underlying model.
  • Boundary markers: The provided instructions do not specify the use of delimiters or boundary markers for the data processed by the tool.
  • Capability inventory: The tool performs embedding retrieval and biological data processing based on the provided inputs.
  • Sanitization: The setup instructions do not detail any sanitization or validation logic for the ingested biological data.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 11, 2026, 05:27 PM