tooluniverse-fastq-qc

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/run_fastq_qc.py uses subprocess.run to execute local bioinformatics binaries. The implementation uses list-based command construction (shell=False), which is the recommended practice for preventing shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill provides user instructions for installing necessary dependencies through conda or mamba via the bioconda and conda-forge channels. These are standard, well-known, and trusted repositories for bioinformatics software.
  • [SAFE]: The skill enforces workspace isolation by refusing to operate if the output directory is the same as the input directory, ensuring raw data remains untouched. No signs of obfuscation, credential harvesting, or unauthorized network activity were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 10:40 PM
Security Audit — agent-trust-hub — tooluniverse-fastq-qc