single-cell-preprocessing-with-omicverse
Warn
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The reference.md file includes a command to install the GPU stack by piping a remote script to the shell:
curl -sSL https://raw.githubusercontent.com/Starlitnightly/omicverse/refs/heads/master/install.sh | bash -s. While the script resides on the author's own repository, executing remote content via shell piping is an inherently risky pattern that bypasses manual review. - [EXTERNAL_DOWNLOADS]: The skill downloads datasets and configuration scripts from external sources. It fetches reference datasets from 10x Genomics (a well-known bioinformatics platform) and an installation script from the author's GitHub repository.
- [COMMAND_EXECUTION]: Multiple shell commands are used for environment setup and data management, including
conda create,pip install, and archive extraction usingtar. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface through the processing of external biological data. 1. Ingestion points:
ov.io.read_10x_mtxloads matrix data from external files. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded content are implemented. 3. Capability inventory: The environment allows command execution and file system writes. 4. Sanitization: No validation or filtering is performed on the content of the loaded data files before processing.
Audit Metadata