skills/omicverse/omicverse-skills/omicverse-single-cell-cellphonedb-communication/Gen Agent Trust Hub
omicverse-single-cell-cellphonedb-communication
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface. It ingests untrusted scientific data (AnnData files) which could potentially contain malicious instructions if interpreted by the agent. 1. Ingestion points: AnnData files loaded via
scanpy.read_h5adinscripts/cpdb_smoke.py. 2. Boundary markers: None. 3. Capability inventory: File system writes and parallel processing viaov.single.run_cellphonedb_v5. 4. Sanitization: None. - [EXTERNAL_DOWNLOADS]: The skill automatically downloads the CellPhoneDB database archive if not present. This is a standard functional requirement for the
omicversewrapper and targets known bioinformatics resources. - [COMMAND_EXECUTION]: The
ov.single.run_cellphonedb_v5function executes complex statistical analyses and manages parallel threads. This capability represents a significant execution surface when processing external data.
Audit Metadata