pydeseq2
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided genomic data files in CSV, TSV, and AnnData (H5AD) formats.
- Ingestion points:
pd.read_csvandad.read_h5adare utilized in the instructions and the accompanying scriptscripts/run_deseq2_analysis.pyto load count matrices and experimental metadata. - Capability inventory: The skill executes statistical computations and writes results to the local filesystem using
to_csvandpickle.dump. - Sanitization: The
scripts/run_deseq2_analysis.pyscript includes validation checks for non-negative integer counts, though it does not explicitly sanitize categorical metadata for potential prompt-injection content. - Boundary markers: No explicit prompt boundary markers or "ignore instructions" warnings are applied to the external data processing steps.
- [DYNAMIC_EXECUTION]: The documentation demonstrates the use of Python's
picklemodule for maintaining analysis state. - Evidence: The
references/workflow_guide.mdfile contains examples ofpickle.loadbeing used to restore counts and metadata from local files. - Context: While
pickle.loadcan execute arbitrary code if used on untrusted files, its implementation here is intended for persisting complex scientific objects within the user's local environment, aligning with the primary purpose of the skill.
Audit Metadata