cellxgene-census Audit-Bericht.

Warnungen

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill declares Bash, Write, and Edit permissions even though the core workflow is read-only querying of public Census data; this broadens the agent attack surface more than necessary.
• The SKILL.md excerpt does not include an explicit safe-handling note that values from public datasets should be treated as untrusted data, especially when used in dynamically constructed filters or displayed to users.
• The excerpt is truncated, so completeness of setup, limitations, and error-handling documentation could not be fully verified from SKILL.md alone; references are present and appear substantive.
• Permission surface needs review: shell or command execution, network or browser access
• Dependency/runtime risk: command execution surface, external package install surface
• Permission surface: shell or command execution, network or browser access

Methode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.