single-cell-downstream-analysis
Fail
Audited by Snyk on Aug 6, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). This is a direct GitHub repository from an individual/unfamiliar account referenced as a required external clone/run for models/scripts, which is a common vector for unvetted or malicious code distribution.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs cloning and later using the CaDRReS-Sc repository at runtime (git clone https://github.com/CSB5/CaDRReS-Sc), which pulls remote code that the workflow (ov.single.Drug_Response with scriptpath='CaDRReS-Sc') will execute—making it a required runtime dependency that can run external code.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata