anndata

审查 · 74
已收录

Data structure for annotated matrices in single-cell analysis. Use when working with .h5ad files or integrating with the scverse ecosystem. This is the data format skill—for analysis workflows use scanpy; for probabilistic models use scvi-tools; for population-scale queries use c

Verified installs0
Stars34.0K
版本1.0.0
质量92/100 · 优秀
信任74/100 · 仅限沙盒
审计88/100 · 需审查

供给资产档案

数据、BI 与分析

CSV, SQL, notebooks, dashboards, data pipelines, BI, ETL, and spreadsheet analysis.

浏览赛道

场景

数据分析

I need my agent to analyze CSV data, produce insights, and explain trends.

适配 Agent

Claude Code + CLI + Codex

适用于 Codex、Claude Code、Cursor、CLI 或自定义 Agent。

安装

就绪

npx skills add K-Dense-AI/scientific-agent-skills --skill anndata

维护状态

新鲜

距上次推送 2 天

风险

需审查

Dependency or permission surface needs review

GitHub 质量

34K

92/100 质量 · 82/100 信任

覆盖标签

数据数据分析data-analysisagent-skill

审查说明

Dependency or permission surface needs review · Permission surface may require sandboxing

Agent 采用评分卡

一眼查看信任、审计与安装准备度

这些分数综合公开仓库元数据、OpenAgentSkill 审查信号、维护新鲜度与安装准备度。它用于候选筛选,不替代人工审查。

质量

优秀
92

高置信候选,具有较强的采用度与健康维护信号。

信任

仅限沙盒
74

有用但信任信号不足或混杂的候选项。在结果闭环证明任务匹配前,请保持在隔离工作区内使用。

审计

需审查
88

对安装准备度、安全元数据、维护情况与采用风险的机器可读审查。

OpenAgentSkill 信任评分 v5

安装前需人工审查

仅在沙盒中运行,并在用于真实工作前比较接近的替代方案。

CodexClaude CodeCursorOpenAgentSkill CLI

Stars

34K 个 GitHub Stars

仓库活跃度

34K 个 Star,3.3K 个 Fork

维护状态

距上次推送 2 天

许可证

BSD-3-Clause license

安装

npx skills add K-Dense-AI/scientific-agent-skills --skill anndata

安装安全性

标准软件包或运行时安装路径

权限范围

shell or command execution, filesystem or document access

Agent 结果

暂未有 Agent 结果数据

文档

README/SKILL.md 上下文充分

风险摘要

生产前审查

  • Permission surface needs review: shell or command execution, filesystem or document access
  • Dependency/runtime risk: command execution surface, external package install surface
  • Permission surface: shell or command execution, filesystem or document access

安装准备度

安装路径可用

  • 安装路径可用
  • 仓库证据可用
  • 已声明许可证
  • 暂无 Agent 验证结果证据

Agent 可读元数据

这个 Skill 的机器可读决策数据。

使用此区块或内嵌 JSON 判断 Agent 是否应安装该 Skill、选择替代方案,或先请求人工审查。

打开 JSON

适用任务

  • GitHub automation 工作流
  • Claude Code 团队
  • 重视 GitHub 采用信号的团队
  • Inspect repository metadata

适用 Agent

CodexClaude CodeCursorOpenAgentSkill CLICLI

安装决策

命令
npx skills add K-Dense-AI/scientific-agent-skills --skill anndata
策略
审查
人工审查

信任与风险

信任
74/100
审计
88/100
风险级别
需审查

结果闭环

端点
/api/agent/outcome
事件 ID
resolve
结果
5

安装命令

npx skills add K-Dense-AI/scientific-agent-skills --skill anndata

不适用场景

  • 需要厂商支持 SLA 的团队
  • 没有内部安全审查的高合规环境
  • 当前元数据中未发现重大风险信号
  • 高风险权限提示:Shell 或命令执行
  • Dependency or permission surface needs review

Agent 安全 v2

60/100 · 安装前审查

已审查并附权限说明审查

可用候选,但 Agent 在安装前应展示权限与审计说明。

在真实工作区安装前需要人工批准。

通过 API 解析

Shell 或命令执行

Skill 元数据引用了终端、CLI、Shell、子进程或命令执行工作流。

网络访问

Skill 可能访问远程页面、API、仓库或外部服务。

文件系统访问

Skill 可能读取或写入项目文件、文档、生成产物或本地工作区状态。

  • 高风险权限提示:Shell 或命令执行
  • Dependency or permission surface needs review

安装目标

在你的 Agent 工作流中安装此 Skill

通过公开安装端点获取命令、安全清单、目标提示词和该 Skill 的规范链接。

skill install

OpenAgentSkill CLI

Resolve policy, run the source installer safely, and report a verified install receipt.

$ npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.2.1/openagentskill-0.2.1.tgz install k-dense-ai-anndata

Agent 解析计划

让 Agent 在安装前验证匹配度。

Resolve API 返回首选 Skill、替代方案、安全策略、审计说明、安装目标和可直接执行的提示词,无需抓取此页面。

打开文本计划

Agent 应检查

  • 从 Resolve API 检查任务匹配与替代方案。
  • 检查审计评分、信任评分和安全策略警告。
  • 检查 Codex、Claude Code、Cursor 或 CLI 的安装目标兼容性。

复制提示词

Task: Use anndata in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20anndata%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/k-dense-ai-anndata/install
Install command: npx skills add K-Dense-AI/scientific-agent-skills --skill anndata
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent 交接

把安装路径交给 Agent,而不是再给一个目录页。

通过公开安装端点获取命令、安全清单、目标提示词和该 Skill 的规范链接。

打开安装 API

Agent 提示词

Use anndata for this task. Review https://www.openagentskill.com/api/skills/k-dense-ai-anndata/install, then install with: npx skills add K-Dense-AI/scientific-agent-skills --skill anndata

Registry 元数据

用于自动选择 Skill 的 Agent 可读档案。

本页通过 Registry API 提供相同的决策、信任、审计、场景和安装信号,让 Agent 无需抓取界面即可排序。

打开 Manifest

适配 Agent

100/100

GitHub automation

平台

Claude Code

审计报告

需审查 · 88/100

对安装准备度、安全元数据、维护情况与采用风险的机器可读审查。

查看审计报告查看评估报告

Agent 决策面板

适合 GitHub automation 的首选

将其作为优先候选,再在你的 Agent 环境中验证 README 与安装路径。

100
就绪度
采用
阶段

栈中角色

首选

主要匹配

GitHub automation

信任标签

可用于生产

安装路径

命令已就绪

适用场景

  • GitHub automation 工作流
  • Claude Code 团队
  • 重视 GitHub 采用信号的团队

证据

  • 33,974 个 GitHub Stars
  • 仓库近期活跃
  • 已提供安装命令或 GitHub 仓库
  • 92/100 质量档案
  • 14 个 OpenAgentSkill 交互事件

先审查

  • 当前元数据中未发现重大风险信号

实施路径

  1. 1在沙盒 Agent 中安装它,并端到端完成一次GitHub automation任务。
  2. 2Compare output quality, latency, and failure behavior against at least one alternative.
  3. 3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

信任档案

仅限沙盒

有用但信任信号不足或混杂的候选项。在结果闭环证明任务匹配前,请保持在隔离工作区内使用。

74
OpenAgentSkill 信任评分

GitHub 采用度

通过

34K 个 GitHub Stars

Star/Fork 活跃度

通过

34K 个 Star,3.3K 个 Fork; 当前元数据中没有议题活跃度信息

近期维护

通过

距上次推送 2 天

许可证清晰度

通过

BSD-3-Clause license

积极信号

  • AI 审查已通过
  • 安装路径可用
  • 仓库证据可用
  • 近期维护的仓库
  • Large GitHub adoption signal
  • 安装命令未发现明显高风险模式
  • 结果闭环已就绪,但需要首次真实 Agent 运行

安装前审查

  • Permission surface needs review: shell or command execution, filesystem or document access
  • Dependency/runtime risk: command execution surface, external package install surface
  • Permission surface: shell or command execution, filesystem or document access
  • 暂未有真实 Agent 结果报告
  • 无人值守安装前需要人工审查

建议操作

仅在沙盒中运行,并在用于真实工作前比较接近的替代方案。

质量档案

优秀 适用于 Agent 工作流的候选

高置信候选,具有较强的采用度与健康维护信号。

92
GitHub Stars
34K
新鲜度
2 天前
安装就绪
许可证
BSD-3-Clause license

工作流匹配

在这些场景使用此 Skill

工作流匹配

加入完整工作流

替代方案短名单

安装前对比

可能适合该任务的相近 Skill。

对比全部

概览

--- name: anndata description: Data structure for annotated matrices in single-cell analysis. Use when working with .h5ad files or integrating with the scverse ecosystem. This is the data format skill—for analysis workflows use scanpy; for probabilistic models use scvi-tools; for population-scale queries use cellxgene-census. license: BSD-3-Clause license allowed-tools: Read Write Edit Bash compatibility: Requires Python 3.11+ and uv. Examples target AnnData 0.12.16, with experimental APIs clearly marked where used. metadata: version: "1.1" skill-author: K-Dense Inc. ---

# AnnData

## Overview

AnnData is a Python package for handling annotated data matrices, storing experimental measurements (X) alongside observation metadata (obs), variable metadata (var), and multi-dimensional annotations (obsm, varm, obsp, varp, uns). Originally designed for single-cell genomics through Scanpy, it now serves as a general-purpose framework for any annotated data requiring efficient storage, manipulation, and analysis.

## When to Use This Skill

Use this skill when: - Creating, reading, or writing AnnData objects - Working with h5ad, zarr, or other genomics data formats - Performing single-cell RNA-seq analysis - Managing large datasets with sparse matrices or backed mode - Concatenating multiple datasets or experimental batches - Subsetting, filtering, or transforming annotated data - Integrating with scanpy, scvi-tools, or other scverse ecosystem tools

## Installation

Requires Python 3.11+. Current stable release: 0.12.16 (released 2026-05-18).

```bash uv pip install "anndata==0.12.16"

# Lazy I/O and dask-backed operations uv pip install "anndata[dask,lazy]==0.12.16"

# Development / docs (contributors) uv pip install "anndata[dev,test,doc]==0.12.16" ```

Use unpinned installs only when intentionally tracking the latest compatible release.

Current API notes: - Use `anndata.io` for non-native `read_*` and `write_*` helpers. Top-level `anndata.read_h5ad` and `anndata.read_zarr` remain supported. - Avoid deprecated APIs: `ad.read`, `AnnData.concatenate()`, `AnnData.*_keys()`, and `anndata.__version__`. Prefer `ad.read_h5ad`, `ad.concat`, mapping `.keys()`, and `importlib.metadata.version("anndata")`. - Treat `anndata.experimental` APIs as useful but unstable. Prefer them for large-data workflows only when their current caveats are acceptable.

## Quick Start

### Creating an AnnData object ```python import anndata as ad import numpy as np import pandas as pd

# Minimal creation X = np.random.rand(100, 2000) # 100 cells × 2000 genes adata = ad.AnnData(X)

# With metadata obs = pd.DataFrame({ 'cell_type': ['T cell', 'B cell'] * 50, 'sample': ['A', 'B'] * 50 }, index=[f'cell_{i}' for i in range(100)])

var = pd.DataFrame({ 'gene_name': [f'Gene_{i}' for i in range(2000)] }, index=[f'ENSG{i:05d}' for i in range(2000)])

adata = ad.AnnData(X=X, obs=obs, var=var) ```

### Reading data ```python # Native formats (read_h5ad/read_zarr remain at top-level) adata = ad.read_h5ad('data.h5ad') adata = ad.read_h5ad('large_data.h5ad', backed='r') # lazy load for large files adata = ad.read_zarr('data.zarr')

# Other formats: prefer anndata.io (top-level imports are deprecated) from anndata.io import read_csv, read_loom, read_mtx

adata = read_csv('data.csv') adata = read_loom('data.loom')

# 10X Genomics: use scanpy (not anndata) — see scanpy skill import scanpy as sc adata = sc.read_10x_h5('filtered_feature_bc_matrix.h5') adata = sc.read_10x_mtx('filtered_feature_bc_matrix/') ```

### Writing data ```python # Write h5ad file adata.write_h5ad('output.h5ad')

# Write with compression adata.write_h5ad('output.h5ad', compression='gzip')

# Write other formats adata.write_zarr('output.zarr') adata.write_csvs('output_dir/') ```

### Basic operations ```python # Subset by conditions t_cells = adata[adata.obs['cell_type'] == 'T cell']

# Subset by indices subset = adata[0:50, 0:100]

# Add metadata adata.obs['quality_score'] = np.random.rand(adata.n_obs) adata.var['highly_variable'] = np.random.rand(adata.n_vars) > 0.8

# Access dimensions print(f"{adata.n_obs} observations × {adata.n_vars} variables") ```

## Core Capabilities

### 1. Data Structure

Understand the AnnData object structure including X, obs, var, layers, obsm, varm, obsp, varp, uns, and raw components.

**See**: `references/data_structure.md` for comprehensive information on: - Core components (X, obs, var, layers, obsm, varm, obsp, varp, uns, raw) - Creating AnnData objects from various sources - Accessing and manipulating data components - Memory-efficient practices

### 2. Input/Output Operations

Read and write data in various formats with support for compression, backed mode, and cloud storage.

**See**: `references/io_operations.md` for details on: - Native formats (h5ad, zarr) - Alternative formats (CSV, MTX, Loom, 10X, Excel) - Backed mode for large datasets - Remote data access - Format conversion - Performance optimization

Common commands: ```python from anndata.io import read_mtx

# Read/write h5ad adata = ad.read_h5ad('data.h5ad', backed='r') adata.write_h5ad('output.h5ad', compression='gzip')

# 10X Genomics (via scanpy) import scanpy as sc adata = sc.read_10x_h5('filtered_feature_bc_matrix.h5')

# Read MTX format adata = read_mtx('matrix.mtx').T ```

### 3. Concatenation

Combine multiple AnnData objects along observations or variables with flexible join strategies.

**See**: `references/concatenation.md` for comprehensive coverage of: - Basic concatenation (axis=0 for observations, axis=1 for variables) - Join types (inner, outer) - Merge strategies (same, unique, first, only) - Tracking data sources with labels - Lazy concatenation (AnnCollection) - On-disk concatenation for large datasets

Common commands: ```python # Concatenate observations (combine samples) adata = ad.concat( [adata1, adata2, adata3], axis=0, join='inner', label='batch', keys=['batch1', 'batch2', 'batch3'] )

# Concatenate variables (combine modalities) adata = ad.concat([adata_rna, adata_protein], axis=1)

# Lazy collection over backed AnnData objects (experimental) from anndata.experimental import AnnCollection

backed_adatas = [ ad.read_h5ad(path, backed='r') for path in ['data1.h5ad', 'data2.h5ad'] ] collection = AnnCollection( backed_adatas, join_obs='outer', join_vars='inner', label='dataset' ) ```

### 4. Data Manipulation

Transform, subset, filter, and reorganize data efficiently.

**See**: `references/manipulation.md` for detailed guidance on: - Subsetting (by indices, names, boolean masks, metadata conditions) - Transposition - Copying (full copies vs views) - Renaming (observations, variables, categories) - Type conversions (strings to categoricals, sparse/dense) - Adding/removing data components - Reordering - Quality control filtering

Common commands: ```python # Subset by metadata filtered = adata[adata.obs['quality_score'] > 0.8] hv_genes = adata[:, adata.var['highly_variable']]

# Transpose adata_T = adata.T

# Copy vs view view = adata[0:100, :] # View (lightweight reference) copy = adata[0:100, :].copy() # Independent copy

# Convert strings to categoricals adata.strings_to_categoricals() ```

### 5. Best Practices

Follow recommended patterns for memory efficiency, performance, and reproducibility.

**See**: `references/best_practices.md` for guidelines on: - Memory management (sparse matrices, categoricals, backed mode) - Views vs copies - Data storage optimization - Performance optimization - Working with raw data - Metadata management - Reproducibility - Error handling - Integration with other tools - Common pitfalls and solutions

Key recommendations: ```python # Use sparse matrices for sparse data from scipy.sparse import csr_matrix adata.X = csr_matrix(adata.X)

# Convert strings to categoricals adata.strings_to_categoricals()

# Use backed mode for large files adata = ad.read_h5ad('large.h5ad', backed='r')

# Store raw before filtering adata.raw = adata.copy() adata = adata[:, adata.var['highly_variable']] ```

## Integration with Scverse Ecosystem

AnnData serves as the foundational data structure for the scverse ecosystem:

### Scanpy (Single-cell analysis) ```python import scanpy as sc

# Preprocessing sc.pp.filter_cells(adata, min_genes=200) sc.pp.normalize_total(adata, target_sum=1e4) sc.pp.log1p(adata) sc.pp.highly_variable_genes(adata, n_top_genes=2000)

# Dimensionality reduction sc.pp.pca(adata, n_comps=50) sc.pp.neighbors(adata, n_neighbors=15) sc.tl.umap(adata) sc.tl.leiden(adata)

# Visualization sc.pl.umap(adata, color=['cell_type', 'leiden']) ```

### Muon (Multimodal data) ```python import muon as mu

# Combine RNA and protein data mdata = mu.MuData({'rna': adata_rna, 'protein': adata_protein}) ```

### PyTorch integration ```python from anndata.experimental import AnnLoader

# Create DataLoader for deep learning dataloader = AnnLoader(adata, batch_size=128, shuffle=True)

for batch in dataloader: X = batch.X # Train model ```

## Common Workflows

### Single-cell RNA-seq analysis ```python import anndata as ad import scanpy as sc

# 1. Load data (10X via scanpy; anndata handles h5ad/zarr natively) adata = sc.read_10x_h5('filtered_feature_bc_matrix.h5')

# 2. Quality control adata.obs['n_genes'] = (adata.X > 0).sum(axis=1) adata.obs['n_counts'] = adata.X.sum(axis=1) adata = adata[adata.obs['n_genes'] > 200] adata = adata[adata.obs['n_counts'] < 50000]

# 3. Store raw adata.raw = adata.copy()

# 4. Normalize and filter sc.pp.normalize_total(adata, target_sum=1e4) sc.pp.log1p(adata) sc.pp.highly_variable_genes(adata, n_top_genes=2000) adata = adata[:, adata.var['highly_variable']]

# 5. Save processed data adata.write_h5ad('processed.h5ad') ```

### Batch integration ```python # Load multiple batches adata1 = ad.read_h5ad('batch1.h5ad') adata2 = ad.read_h5ad('batch2.h5ad') adata3 = ad.read_h5ad('batch3.h5ad')

# Concatenate with batch labels adata = ad.concat( [adata1, adata2, adata3], label='batch', keys=['batch1', 'batch2', 'batch3'], join='inner' )

# Apply batch correction import scanpy as sc sc.pp.combat(adata, key='batch')

# Continue analysis sc.pp.pca(adata) sc.pp.neighbors(adata) sc.tl.umap(adata) ```

### Working with large datasets ```python # Open in backed mode adata = ad.read_h5ad('100GB_dataset.h5ad', backed='r')

# Filter based on metadata (no data loading) high_quality = adata[adata.obs['quality_score'] > 0.8]

# Load filtered subset adata_subset = high_quality.to_memory()

# Process subset process(adata_subset)

# Or process in chunks chunk_size = 1000 for i in range(0, adata.n_obs, chunk_size): chunk = adata[i:i+chunk_size, :].to_memory() process(chunk) ```

## Troubleshooting

### Out of memory errors Use backed mode or convert to sparse matrices: ```python # Backed mode adata = ad.read_h5ad('file.h5ad', backed='r')

# Sparse matrices from scipy.sparse import csr_matrix adata.X = csr_matrix(adata.X) ```

### Slow file reading Use compression and appropriate formats: ```python # Optimize for storage adata.strings_to_categoricals() adata.write_h5ad('file.h5ad', compression='gzip')

# Use Zarr for cloud storage; v3 writes are opt-in in anndata 0.12 import anndata as ad

ad.settings.zarr_write_format = 3 ad.settings.auto_shard_zarr_v3 = True # experimental; independent of zarr_write_format adata.write_zarr('file.zarr', chunks=(1000, 1000)) ```

### Index alignment issues Always align external data on index: ```python # Wrong adata.obs['new_col'] = external_data['values']

# Correct adata.obs['new_col'] = external_data.set_index('cell_id').loc[adata.obs_names, 'values'] ```

## Additional Resources

- **Official documentation**: https://anndata.readthedocs.io/ - **Scanpy tutorials**: https://scanpy.readthedocs.io/ - **Scverse ecosystem**: https://scverse.org/ - **GitHub repository**: https://github.com/scverse/anndata

技术详情

版本
1.0.0
许可证
BSD-3-Clause license
最近更新
2026年8月20日
发布时间
2026年8月20日

决策摘要

首选

100
就绪
采用
阶段

33,974 个 GitHub Stars

审计

安装审查

安装与采用审查

88
需审查
安全性
80/100
维护状态
100/100
安装
92/100
打开完整审计查看评估报告

Agent 验证证据

Agent 验证证据

来自解析、审查、安装和一次小范围运行后的结果报告。

0
已验证
Needs first agent run自动安装: 先审查最近: 未知
成功率
近期失败
结果
0
输出质量
失败
0
不相关
0
安装次数
0
风险拦截
0
需要配置
0
生产环境
0

暂时没有 Agent 结果数据。首次 Agent 执行可以通过 /api/agent/outcome 报告成功、需要设置、风险拦截、失败或不相关。

安装

加入 Agent 工作流

免费且开源. 在生产 Agent 中安装前请先审查报告。

增长闭环

分享工具包

X

为 anndata 准备的场景化草稿,可手动发布到 X。

策展说明
anndata: Data structure for annotated matrices in single-cell analysis. Use when working with .h5ad fi...

34.0K stars

https://www.openagentskill.com/skills/k-dense-ai-anndata?ref=x
打开 X 草稿
可选:带安装命令的回复
Listing + install path for anndata:
https://www.openagentskill.com/skills/k-dense-ai-anndata?ref=x

Install: npx skills add K-Dense-AI/scientific-agent-skills --skill anndata
打开回复草稿

收录来源

Registry 收录

可认领

此列表来自公开来源,维护者认领获批前不会标记为官方。

创作者
K-Dense-AI
收录方
OpenAgentSkill 社区索引

归属链接指向公开仓库或创作者主页。创作者可认领列表以更新所有权信号。

认领此 Skill

所有者认领

认领此 Skill 页面

这条 Registry 收录 列表归属于 K-Dense-AI,但尚未标记为官方。认领后可增加已验证所有者信号,使后续发布、安装和审计更新更值得信赖。

创作者外链工具包

将证据徽章加入你的 README

在开发者评估仓库的位置展示规范页面、当前信任与审计信号,以及真实的 Agent 验证证据。

[![Listed on OpenAgentSkill](https://www.openagentskill.com/api/badge/k-dense-ai-anndata?metric=listed&label=Listed)](https://www.openagentskill.com/skills/k-dense-ai-anndata)
[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/k-dense-ai-anndata?metric=trust&label=Trust)](https://www.openagentskill.com/skills/k-dense-ai-anndata)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/k-dense-ai-anndata?metric=audit&label=Audit)](https://www.openagentskill.com/skills/k-dense-ai-anndata/audit)
[![Agent Proven](https://www.openagentskill.com/api/badge/k-dense-ai-anndata?metric=proven&label=Agent%20Proven)](https://www.openagentskill.com/skills/k-dense-ai-anndata)

作者

K

K-Dense-AI

@k-dense-ai

平台适配

健康信号

GitHub Stars
34.0K
质量评分
55/100
最近 GitHub 推送
2026年8月20日
框架提示
未知
OpenAgentSkill 浏览量
14
复制安装命令
0
跳转点击
0

社区信号

告诉我们这个 Skill 是否对你的 Agent 工作流有帮助。汇总反馈会持续改善排序。

信任与安全

仅限沙盒

74
  • GitHub 采用度34K 个 GitHub Stars通过
  • Star/Fork 活跃度34K 个 Star,3.3K 个 Fork; 当前元数据中没有议题活跃度信息通过
  • 近期维护距上次推送 2 天通过
  • 许可证清晰度BSD-3-Clause license通过
  • README/SKILL.md 完整度元数据包含足够的用法与工作流上下文通过
  • 依赖与运行时风险command execution surface, external package install surface检查