omicverse-bulk-metabol-untargeted-lipidomics
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches metabolic pathway information from KEGG's official REST API and compound datasets from the European Bioinformatics Institute (EBI) FTP servers. These are standard operations for retrieving public scientific data to support peak annotation and pathway inference.
- [COMMAND_EXECUTION]: Recommends the installation of the
mummichogPython package viapipto enable advanced pathway enrichment features. This is a standard dependency for the optionalmummichog_externalbackend. - [DATA_EXFILTRATION]: No unauthorized data exfiltration or sensitive information exposure was detected. The skill reads local user-provided files and maintains a local cache for scientific databases in the standard
~/.cache/omicversedirectory. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data through functions like
read_lcmsandread_wide(SKILL.md). While there are no explicit boundary markers, the ingestion is limited to scientific data parsing (m/z values, retention times, lipid names) using regex and float conversion, which minimizes the risk of prompt injection being successfully executed as logic. The skill lacks high-privilege shell or network execution capabilities triggered by this data. - [SAFE]: All identified behaviors are consistent with the skill's primary purpose of biological data analysis. No malicious obfuscation, persistence mechanisms, or privilege escalation patterns were found.
Audit Metadata