dnanexus-integration
Verdict safe, but 1 finding (1 medium), mainly command injection. Most recent scan 2026-10-21.
Second scanner: NVIDIA SkillSpector
The two scanners disagree: Cisco found nothing and SkillSpector says do not install. One of them has a blind spot here; read the skill before trusting either. How the two scanners compare across the whole corpus: Two scanners, one corpus.
What this skill does
Builds and operates reproducible genomics workloads on DNAnexus with the dx CLI, dxpy, apps/applets, native workflows, dxCompiler, and Nextflow. Supports DNAnexus data transfers, dxapp.json development, execution monitoring, workflow import, and project automation.
- Package
- 12 files, 154 KB
- SKILL.md
- 1489 words, 12+ sections
- Code
- Python (2)
- License
- MIT
- Compatibility
- Requires a DNAnexus account, network access, Python 3.11+, and dx-toolkit/dxpy; some workflow and infrastructure features require organization licenses or policies.
SKILL.md covers: DNAnexus Integration · Purpose · Operating Contract · Install and Authenticate · Safe Preflight · Choose the Right Path · Core Workflows · Transfer data · Search accurately with dxpy · Build an applet · Launch with explicit controls · Monitor jobs and analyses
Findings
MEDIUM Python code block executes shell commands Command Injectionbehavioral
Code block in references/app-development.md at line 88 contains potentially dangerous Python code.
references/app-development.md:88
subprocess.run(What is in the package
| File | Kind | Size |
|---|---|---|
SKILL.md | doc | 12 KB |
references/app-development.md | doc | 9.6 KB |
references/authentication.md | doc | 8.4 KB |
references/configuration.md | doc | 13 KB |
references/data-operations.md | doc | 13 KB |
references/job-execution.md | doc | 13 KB |
references/operations-and-troubleshooting.md | doc | 14 KB |
references/python-sdk.md | doc | 13 KB |
references/sources.md | doc | 12 KB |
references/workflow-languages.md | doc | 9.2 KB |
scripts/inspect_dxpy.py | script | 10 KB |
scripts/validate_dxapp.py | script | 27 KB |
External hosts referenced
documentation.dnanexus.com github.com arxiv.org pypi.org api.dnanexus.com autodoc.dnanexus.com doi.org export.arxiv.org
Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.
Environment variables referenced
DX_SECURITY_CONTEXT DXCOMPILER_WDL_IMPORT_BEARER_TOKENS DX_API_TOKEN DX_AUTH_TOKEN DX_JOB_ID DX_PROJECT_CONTEXT_ID DX_RESOURCES_ID DX_WORKSPACE_ID
Package contents recorded 2026-10-22 at commit 593377bb0487. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.
What we checked
- Static analyzer. Pattern rules over SKILL.md and bundled files: known-bad commands, exfiltration URLs, secrets, obfuscation.
- Bytecode analyzer.
- Pipeline analyzer.
- Correlation analyzer.
- Behavioral analyzer. Checks what the skill asks the agent to do against what its description claims it does.
- Trigger analyzer. Looks for instructions that fire on conditions the user did not ask for.
What we did not check
- Runtime behaviour. The skill was not executed; findings come from reading its files.
- Anything fetched at install or run time, including remote scripts, package dependencies, and URLs the skill tells the agent to open.
- Content the analyzers cannot read: images, binaries, and some non-English text.
- Known scanner bypass classes. See the methodology and limitations page.
Sources
- Repository: https://github.com/K-Dense-AI/scientific-agent-skills
- Raw scan result: skills-dnanexus-integration-scan.json
- Badge for your README:
- Request a re-scan