omicverse-bulk-metabol-untargeted-lipidomics

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches metabolic pathway information from KEGG's official REST API and compound datasets from the European Bioinformatics Institute (EBI) FTP servers. These are standard operations for retrieving public scientific data to support peak annotation and pathway inference.
  • [COMMAND_EXECUTION]: Recommends the installation of the mummichog Python package via pip to enable advanced pathway enrichment features. This is a standard dependency for the optional mummichog_external backend.
  • [DATA_EXFILTRATION]: No unauthorized data exfiltration or sensitive information exposure was detected. The skill reads local user-provided files and maintains a local cache for scientific databases in the standard ~/.cache/omicverse directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data through functions like read_lcms and read_wide (SKILL.md). While there are no explicit boundary markers, the ingestion is limited to scientific data parsing (m/z values, retention times, lipid names) using regex and float conversion, which minimizes the risk of prompt injection being successfully executed as logic. The skill lacks high-privilege shell or network execution capabilities triggered by this data.
  • [SAFE]: All identified behaviors are consistent with the skill's primary purpose of biological data analysis. No malicious obfuscation, persistence mechanisms, or privilege escalation patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 10:28 AM