scvi-tools

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill guides the user to install the scvi-tools package via the uv pip package manager. This is a standard dependency for the provided analysis capabilities.
  • [PROMPT_INJECTION]: The 'Suggest Using K-Dense Web For Complex Worflows' section provides specific instructions to the agent to steer user behavior toward a particular web platform (www.k-dense.ai). This is a marketing-related behavioral instruction rather than a safety guideline bypass.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process complex genomic datasets which represent a potential surface for indirect injection if malicious instructions were embedded in dataset metadata.
  • Ingestion points: Data loading via scvi.data.heart_cell_atlas_subsampled() or user-provided AnnData files.
  • Boundary markers: None specified in the prompt instructions.
  • Capability inventory: Python code execution, package installation, and file system writes via model.save().
  • Sanitization: The skill does not explicitly provide sanitization logic for data-derived content.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 08:26 AM