omicverse-bulk-metabol-preprocessing
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads sample datasets from
rest.xialab.ca, which is the official API for MetaboAnalyst, a well-known and trusted service in the metabolomics community. This is used for demonstration purposes and does not involve remote code execution. - [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface by ingesting and processing untrusted data from external CSV and peak table files.
- Ingestion points: Data enters the agent's context through functions such as
ov.metabol.read_metaboanalyst,ov.metabol.read_wide, andov.metabol.read_lcmsmentioned inSKILL.md. - Boundary markers: The instructions do not define explicit boundary markers or warnings for the agent to ignore instructions embedded within the processed data.
- Capability inventory: The skill includes data transformation, statistical tests (
welch_t,anova), and visualization, but lacks capabilities for arbitrary command execution or file system writes based on data content. - Sanitization: There is no explicit mention of sanitization or validation of the text content within the data files to prevent prompt injection.
Audit Metadata