nextflow
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute installation scripts directly from official remote sources for the Nextflow engine and the nf-test framework.
- Evidence:
curl -s https://get.nextflow.io | bashinSKILL.md. - Evidence:
curl -fsSL https://get.nf-test.com | bashinreferences/testing.md. - [COMMAND_EXECUTION]: The skill instructs the user to use elevated privileges to move the Nextflow executable to a system-wide path.
- Evidence:
sudo mv nextflow /usr/local/bin/inSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official tooling via standard package managers and direct downloads from well-known technology domains.
- Evidence: Fetches
nf-coreviapipandcondaas described inSKILL.md. - [PROMPT_INJECTION]: The skill describes patterns for ingesting external data, such as CSV samplesheets, which represents an inherent surface for indirect prompt injection common to workflow management tools.
- Ingestion points: Data is ingested from external files using
channel.fromPathandsplitCsvas described inreferences/language.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content embedded in the processed data files.
- Capability inventory: The Nextflow environment allows for the execution of arbitrary Bash commands and network access within process blocks.
- Sanitization: The documentation does not specify input validation or sanitization steps for external data before it is interpolated into shell commands.
Audit Metadata