galaxy-automation
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill defines
bioblendandplanemoas dependencies in its YAML metadata. These are established, well-known libraries for Galaxy automation and are sourced from reputable bioinformatics community repositories. - [COMMAND_EXECUTION]: Python templates in the skill use
os.system()to executeplanemocommands. The skill mitigates risk by recommending quotes for path variables, but manual string formatting for shell execution is a sensitive pattern that could be vulnerable to injection if variables are improperly sanitized. - [COMMAND_EXECUTION]: An example demonstrating the use of
curldata piped topython3 -cfor parsing API responses is provided. This pattern involves executing logic via an interpreter on data retrieved from a network source. - [SAFE]: The skill provides patterns for secure API key management, including the use of environment variables and log masking functions to prevent credential leakage.
- [SAFE]: Deserialization of job configuration is performed using
yaml.safe_load(), which is a secure practice that prevents arbitrary code execution during the parsing of external YAML files.
Audit Metadata