pyopenms
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data access behaviors were detected across any of the analyzed files. The skill correctly limits its scope to processing local mass spectrometry data files using the official pyopenms library.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing 'pyopenms' via 'uv pip install', which is the standard installation method for this well-known bioinformatics library. No suspicious or unverified third-party scripts are downloaded or executed.
- [DATA_EXFILTRATION]: Analysis shows that file operations are strictly localized to common mass spectrometry formats (e.g., mzML, idXML, FASTA). There are no network operations that could lead to data exfiltration.
- [COMMAND_EXECUTION]: The code snippets provided are focused on the pyopenms Python API for data processing and do not involve the execution of arbitrary shell commands or subprocesses.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (mass spectrometry files), it does so using structured parsing libraries for scientific data formats, which significantly limits the risk of indirect prompt injection compared to skills that process unstructured natural language from untrusted sources.
Audit Metadata