migrate-nextflow-code
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local shell commands including
nextflow lint,nextflow run, andnf-testto validate pipeline behavior and syntax during the migration process. - [EXTERNAL_DOWNLOADS]: The skill fetches numerous documentation and reference files from the official Nextflow GitHub repository to ensure the migration follows the latest best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Nextflow pipeline code provided by the user, which presents an attack surface where instructions embedded in the code could attempt to override agent behavior.
- Ingestion points: The agent reads and refactors local pipeline files (
.nf,.config,.yml) as part of the migration task. - Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore potentially malicious content within the pipeline files.
- Capability inventory: The agent is authorized to execute shell commands via the Nextflow CLI and test runners.
- Sanitization: No explicit sanitization or filtering of the input pipeline code is performed before the agent processes it for refactoring.
Audit Metadata