galaxy-automation

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill defines bioblend and planemo as dependencies in its YAML metadata. These are established, well-known libraries for Galaxy automation and are sourced from reputable bioinformatics community repositories.
  • [COMMAND_EXECUTION]: Python templates in the skill use os.system() to execute planemo commands. The skill mitigates risk by recommending quotes for path variables, but manual string formatting for shell execution is a sensitive pattern that could be vulnerable to injection if variables are improperly sanitized.
  • [COMMAND_EXECUTION]: An example demonstrating the use of curl data piped to python3 -c for parsing API responses is provided. This pattern involves executing logic via an interpreter on data retrieved from a network source.
  • [SAFE]: The skill provides patterns for secure API key management, including the use of environment variables and log masking functions to prevent credential leakage.
  • [SAFE]: Deserialization of job configuration is performed using yaml.safe_load(), which is a secure practice that prevents arbitrary code execution during the parsing of external YAML files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 01:57 AM