Audit History
arboreto - 4 audits
Audit version 4
Latest SafeJan 17, 2026, 06:53 AM
All 118 static findings are FALSE POSITIVES. The analyzer misidentified markdown Python code blocks (using triple backticks) as shell command execution, genetic algorithm names (GENIE3, GRNBoost2) as weak cryptographic algorithms, and Dask cluster configuration examples as C2/network reconnaissance. Arboreto is a legitimate open-source bioinformatics library for gene regulatory network inference from transcriptomics data. The only Python script (scripts/basic_grn_inference.py:1-97) is benign code that imports standard libraries and performs standard bioinformatics computations.
Risk Factors
⚙️ External commands (2)
🌐 Network access (2)
Audit version 3
SafeJan 17, 2026, 06:53 AM
All 118 static findings are FALSE POSITIVES. The analyzer misidentified markdown Python code blocks (using triple backticks) as shell command execution, genetic algorithm names (GENIE3, GRNBoost2) as weak cryptographic algorithms, and Dask cluster configuration examples as C2/network reconnaissance. Arboreto is a legitimate open-source bioinformatics library for gene regulatory network inference from transcriptomics data. The only Python script (scripts/basic_grn_inference.py:1-97) is benign code that imports standard libraries and performs standard bioinformatics computations.
Risk Factors
⚙️ External commands (2)
🌐 Network access (2)
Audit version 2
SafeJan 12, 2026, 04:12 PM
All 110 static findings are false positives. The analyzer misidentified markdown code blocks as shell commands and genetic algorithm references as cryptographic algorithms. Arboreto is a legitimate bioinformatics library for gene regulatory network inference.
Risk Factors
⚙️ External commands (94)
Audit version 1
SafeJan 5, 2026, 03:56 PM
Safe bioinformatics tool for gene regulatory network inference. No security concerns detected. Only accesses user-provided data files and writes output to specified locations.