arboreto
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [Prompt Injection] (SAFE): The skill's instructions are purely technical and focus on gene regulatory network analysis. No attempts to override agent behavior or bypass safety guidelines were detected.- [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials or sensitive file access patterns (e.g., SSH keys, cloud configs) were found. Network operations are limited to standard Dask scheduler connections.- [Remote Code Execution] (SAFE): The skill does not download or execute unverified remote scripts. It relies on standard package installation and local script execution.- [Indirect Prompt Injection] (LOW): The skill processes external gene expression data in TSV format (e.g., in scripts/basic_grn_inference.py). While this represents an ingestion point for untrusted data, the data is treated as numeric matrices for statistical modeling rather than natural language instructions, resulting in minimal risk to the agent's reasoning.- [Dynamic Execution] (SAFE): No usage of unsafe dynamic execution functions like eval(), exec(), or unsafe pickle deserialization was found.
Audit Metadata