single-cell-preprocessing-with-omicverse

Warn

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: A command in reference.md downloads and executes a shell script directly from a GitHub repository (curl -sSL https://raw.githubusercontent.com/Starlitnightly/omicverse/refs/heads/master/install.sh | bash -s). Although the repository belongs to the skill's author, executing remote scripts via a shell pipe is a high-risk practice that bypasses integrity verification.
  • [EXTERNAL_DOWNLOADS]: The skill downloads a dataset from cf.10xgenomics.com using wget. 10x Genomics is a well-known bioinformatics data provider; however, the use of unencrypted HTTP for the download introduces a risk of interception or tampering.
  • [COMMAND_EXECUTION]: The skill instructions and reference.md file include multiple system-level commands for environment setup and package management, such as conda create, conda install, and pip install.
  • [SAFE]: The skill implements robust data validation patterns, including mandatory checks for the existence of batch columns and handling of missing values (NaN) before integration operations. These defensive measures improve the reliability and safety of the data processing pipeline.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 10:05 AM