bulk-rna-seq-batch-correction-with-combat
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructions and reference code utilize
pd.read_picklefor data ingestion. This method is inherently insecure as it can execute arbitrary Python code during the deserialization process. If a user is tricked into loading a malicious pickle file from an untrusted source, it could lead to code execution on the user's system.- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing external data (CSV and Pickle files) and integrating it into the agent's workflow for analysis and plotting. - Ingestion points: Loading of external expression matrices via
pd.read_pickleandpd.read_csvinSKILL.mdandreference.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are used when handling these external files.
- Capability inventory: The agent has the ability to write to the file system (
to_csv,write_h5ad), perform complex data processing (PCA, ComBat), and generate visualizations. - Sanitization: There is no evidence of input validation or sanitization for the contents of the ingested data files.
Audit Metadata