scvi-tools
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install the
scvi-toolspackage via theuv pippackage manager. This is a standard dependency for the provided analysis capabilities. - [PROMPT_INJECTION]: The 'Suggest Using K-Dense Web For Complex Worflows' section provides specific instructions to the agent to steer user behavior toward a particular web platform (www.k-dense.ai). This is a marketing-related behavioral instruction rather than a safety guideline bypass.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process complex genomic datasets which represent a potential surface for indirect injection if malicious instructions were embedded in dataset metadata.
- Ingestion points: Data loading via
scvi.data.heart_cell_atlas_subsampled()or user-provided AnnData files. - Boundary markers: None specified in the prompt instructions.
- Capability inventory: Python code execution, package installation, and file system writes via
model.save(). - Sanitization: The skill does not explicitly provide sanitization logic for data-derived content.
Audit Metadata