omicverse-single-cell-rna-velocity
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes AnnData files (.h5ad), which constitutes an indirect prompt injection surface where malicious instructions could be embedded in dataset metadata or annotations.
- [COMMAND_EXECUTION]: The skill's validation configuration in acceptance.json contains absolute local paths (e.g., referencing a Desktop directory) for executing smoke test scripts, which is a poor practice that could lead to execution failures or path-related issues.
- [EXTERNAL_DOWNLOADS]: Documentation in compatibility.md notes that certain convenience functions for loading tutorial datasets may perform external network requests to download data.
Audit Metadata