alterlab-cosmic
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill provides legitimate research tools for the COSMIC cancer mutation database.
- [EXTERNAL_DOWNLOADS]: Fetches genomic data files from the official COSMIC database at cancer.sanger.ac.uk. This aligns with the skill's stated purpose and uses official infrastructure.
- [COMMAND_EXECUTION]: Provides a Python utility (
scripts/download_cosmic.py) for data acquisition. The script uses standard libraries (requests) to interact with the COSMIC API and write data to the local filesystem. - [SAFE]: The skill processes structured genomic data (TSV, CSV, VCF) which presents a minimal surface for indirect prompt injection.
- Ingestion points: Reads data from files downloaded to the local system (SKILL.md).
- Boundary markers: None implemented in processing examples.
- Capability inventory: File system writes via the download script (scripts/download_cosmic.py).
- Sanitization: Standard parsing via pandas/pysam; no specific content validation for instruction detection.
Audit Metadata