Skills
Navigate
skills/omicverse/omicverse-skills/single-cell-downstream-analysis/Gen Agent Trust Hub

single-cell-downstream-analysis

Warn

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads gene annotations from GENCODE and pre-trained drug response models via utility functions such as ov.utils.download_GDSC_data() and ov.utils.download_CaDRReS_model().
  • [COMMAND_EXECUTION]: The skill instructs the user to clone an external third-party repository from GitHub using the command git clone https://github.com/CSB5/CaDRReS-Sc.
  • [REMOTE_CODE_EXECUTION]: The skill uses the ov.single.Drug_Response function with the scriptpath parameter pointing to the cloned CaDRReS-Sc repository, which facilitates the execution of external code fetched at runtime. Additionally, it uses ov.utils.save to persist objects as .pkl files, which involves the pickle module and carries risks of unsafe deserialization and arbitrary code execution if files are tampered with.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 22, 2026, 05:43 PM
Security Audit — agent-trust-hub — single-cell-downstream-analysis