bio-prefect-dask-nextflow

Pass

Audited by Gen Agent Trust Hub on Feb 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The skill provides templates for executing bioinformatics tools via subprocess.run (list-based) and Nextflow DSL, which is the primary purpose of the skill.\n- [PROMPT_INJECTION] (LOW): The skill is vulnerable to Indirect Prompt Injection (Category 8) as it processes user requirements and file paths to generate execution scaffolds.\n
  • Ingestion points: Workflow requirements and data locations in SKILL.md.\n
  • Boundary markers: None present in the generated Python or Nextflow code.\n
  • Capability inventory: Includes subprocess.run in prefect-dask.md and Nextflow process execution in nextflow-hpc.md.\n
  • Sanitization: Relies on standard library object types (e.g., Python Path) without additional input validation or sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 19, 2026, 05:19 PM