omero-integration
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill documents how to access and retrieve microscopy images, metadata, and administrative information from an OMERO server. This is the primary intended purpose of the skill and is handled via official API calls to a user-provided host.
- [DATA_EXFILTRATION]: The skill includes examples for downloading original microscopy files from the server to local storage and uploading local analysis results back to the server. These file operations are core functionalities of the OMERO platform integration and do not involve unauthorized data movement.
- [COMMAND_EXECUTION]: The installation instructions use
uv pip install omero-pyto install the official OMERO Python gateway. This is a standard and expected procedure for using the API. - [CREDENTIALS_UNSAFE]: Multiple reference files use obvious placeholders for credentials (e.g.,
ADMIN_PASS = 'password',PASSWORD = 'pass',USERNAME = 'user'). These are documented as examples and do not represent actual hardcoded secrets. - [COMMAND_EXECUTION]: The skill provides guidance on using administrative features like
suConn(substitute user connection) and deletion operations. These are standard platform features intended for administrative users and are documented within their legitimate context. - [DATA_EXPOSURE]: The skill ingests data (image metadata, annotations, and tables) from a remote OMERO server.
- Ingestion points:
references/data_access.md,references/metadata.md, andreferences/tables.mddescribe retrieving structured data and annotations. - Boundary markers: Not explicitly defined in the documentation examples, as it focuses on API usage rather than prompt construction.
- Capability inventory: The skill can write to the local file system (
references/advanced.md), upload file annotations (references/metadata.md), and upload server-side scripts (references/scripts.md). - Sanitization: None present in the documentation examples; users of the API are expected to implement their own data validation.
Audit Metadata