setup-transcriptformer-remote-tool
Warn
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a Python wheel file (
tuplatform_connect-0.3.0-py3-none-any.whl) from an external domainhttps://connect.aiscientist.tools/downloads/. While the download is SHA-256 pinned, the domain is not a standard package registry. - [REMOTE_CODE_EXECUTION]: The externally downloaded Python wheel is installed using
pip, which involves the execution of the package's setup and runtime code. - [COMMAND_EXECUTION]: The skill utilizes heredocs to execute local Python scripts (e.g., `python
- <<'PY' ...`) to validate local MCP (Model Context Protocol) tool discovery and functionality.
- [INDIRECT_PROMPT_INJECTION]: The setup facilitates the creation of a tool (
run_transcriptformer_embedding_retrieval) that processes biological data, creating a potential surface for indirect injection. - Ingestion points: The
run_transcriptformer_embedding_retrievaltool accepts JSON arguments includinggene_namesanddiseasewhich are processed by the underlying model. - Boundary markers: The provided instructions do not specify the use of delimiters or boundary markers for the data processed by the tool.
- Capability inventory: The tool performs embedding retrieval and biological data processing based on the provided inputs.
- Sanitization: The setup instructions do not detail any sanitization or validation logic for the ingested biological data.
Audit Metadata