pacsomatic
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/run_pacsomatic.pyperforms multiple system calls usingsubprocess.runto interact with environment managers (conda,mamba), version control (git), and runtime environments (java,nextflow). It also executes HPC scheduler commands likebsub,sbatch, andqsubto submit tasks. - [EXTERNAL_DOWNLOADS]: The skill is configured to clone the official nf-core/pacsomatic pipeline from GitHub (
https://github.com/nf-core/pacsomatic.git) if a local copy is not provided. It also supports the automatic creation of Conda environments from YAML specification files, which involves downloading packages from remote registries. - [REMOTE_CODE_EXECUTION]: The skill dynamically generates shell scripts containing Nextflow commands and scheduler directives. These scripts are subsequently executed on the host system or an HPC cluster. Input sanitization is performed using
shlex.quotefor most parameters to mitigate shell injection risks, though the--module-loadparameter is included in the generated script as a raw string without explicit sanitization.
Audit Metadata