omicverse-bulk-celltype-deconvolution

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill facilitates bioinformatics analysis using the established omicverse library. No evidence of malicious code, credential theft, or unauthorized network activity was found.
  • [EXTERNAL_DOWNLOADS]: The documentation suggests installing the BayesPrism package via pip to enable Bayesian deconvolution functionality. This is a legitimate, domain-specific dependency used for scientific computing.
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests AnnData objects (adata_bulk, adata_single). Evidence chain: (1) Ingestion points: adata_bulk and adata_single in SKILL.md; (2) Boundary markers: Absent; (3) Capability inventory: Restricted to data processing and visualization via omicverse and matplotlib in reference.md; (4) Sanitization: Absent. The risk is assessed as safe given the lack of dangerous sinks like shell execution or network exfiltration using the ingested data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 10:28 AM