The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external genomic data files, which represents a standard surface for indirect prompt injection attacks.
Ingestion points: Data loading functions such as sc.read_10x_mtx, sc.read_10x_h5, sc.read_h5ad, and sc.read_csv referenced in SKILL.md.
Boundary markers: The skill does not provide delimiters or instructions for the agent to ignore potentially malicious instructions embedded in file metadata or gene identifiers.
Capability inventory: The skill has the ability to write files to the local system (adata.write) and execute local Python scripts.
Sanitization: There is no evidence of data validation or sanitization of the contents within the processed RNA-seq datasets.
[COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands and local Python scripts.
Evidence: SKILL.md includes commands to run analysis scripts (python scripts/qc_analysis.py) and manipulate files (cp assets/analysis_template.py my_analysis.py) to facilitate the scientific workflow.

scanpy