arboreto
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
arboretolibrary and its associated dependencies, includingdask,distributed,numpy,pandas,scikit-learn, andscipy, via standard package managers like PyPI and Bioconda. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external transcriptomics data provided by the user, which presents a surface for potential indirect instructions if the ingested data is processed by an LLM.
- Ingestion points: The
scripts/basic_grn_inference.pyscript loads external TSV data files usingpd.read_csvand transcription factor lists viaload_tf_names. - Boundary markers: There are no explicit boundary markers or instructions defined to prevent the agent from interpreting content within these data files as instructions.
- Capability inventory: The skill possesses capabilities for file system writes (
to_csv) and parallel/distributed execution through the Dask framework. - Sanitization: The data ingestion process does not implement specific sanitization or validation routines for non-numeric content within the input files.
Audit Metadata