arboreto
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
arboretolibrary and its common data science dependencies (includingpandas,numpy,dask, andscikit-learn) using theuvpackage manager. These are standard installations from public registries. - [REMOTE_CODE_EXECUTION]: The skill includes documentation and code for connecting to remote Dask schedulers via TCP (e.g.,
tcp://scheduler:8786) to facilitate distributed computation. While this mechanism involves remote task execution, it is the primary intended functionality of the Dask integration for processing large-scale datasets. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of processing external data files.
- Ingestion points: In
scripts/basic_grn_inference.py, the skill reads gene expression data from a user-specified TSV file usingpd.read_csv. - Boundary markers: The instructions do not define boundary markers or provide the agent with guidance to ignore potential natural language instructions embedded within the gene expression matrices.
- Capability inventory: The skill possesses the capability to execute Python code and manage multi-process tasks via Dask and the
distributedlibrary as seen inSKILL.mdandscripts/basic_grn_inference.py. - Sanitization: The script performs standard numeric data loading via Pandas but lacks specific sanitization or filtering to prevent the processing of malicious payloads embedded in the data.
Audit Metadata