phylogenetics
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill interfaces with external command-line tools like MAFFT, IQ-TREE 2, and FastTree using the
subprocessmodule. It correctly uses argument lists rather than shell strings, which prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: Installation instructions refer to official and widely-used repositories including PyPI and the Bioconda channel for Conda. These are established sources within the scientific community.
- [REMOTE_CODE_EXECUTION]: No evidence of remote script execution (such as piping curl output to a shell) was found. The skill relies entirely on locally installed binaries and Python libraries.
- [DATA_EXFILTRATION]: The skill performs no unauthorized network operations. Its activity is restricted to processing user-provided sequence data and generating local analysis reports and visualizations.
Audit Metadata