pysam
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data from genomic file formats (SAM, BAM, VCF, BCF, FASTA, FASTQ).
- Ingestion points: Data enters the agent's context through
pysam.AlignmentFile,pysam.VariantFile,pysam.FastaFile,pysam.FastxFile, andpysam.TabixFileas documented inSKILL.mdand the reference files. - Boundary markers: There are no explicit boundary markers or safety instructions directing the agent to ignore potential instructions embedded within the genomic sequence data, read names, or variant metadata.
- Capability inventory: The skill allows for file writing (
AlignmentFile.write,VariantFile.write, and standard Pythonopen) and the execution of external bioinformatics commands viapysam.samtoolsandpysam.bcftoolswrappers. - Sanitization: No sanitization or validation logic is provided to filter out potential malicious instructions embedded in the genomic data.
- [COMMAND_EXECUTION]: The skill provides instructions and examples for executing external command-line utilities like
samtoolsandbcftoolsusing thepysamlibrary wrappers. These tools execute as subprocesses and can perform significant file system and data processing operations.
Audit Metadata