single-cell-downstream-analysis

Fail

Audited by Snyk on Aug 6, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). This is a direct GitHub repository from an individual/unfamiliar account referenced as a required external clone/run for models/scripts, which is a common vector for unvetted or malicious code distribution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs cloning and later using the CaDRReS-Sc repository at runtime (git clone https://github.com/CSB5/CaDRReS-Sc), which pulls remote code that the workflow (ov.single.Drug_Response with scriptpath='CaDRReS-Sc') will execute—making it a required runtime dependency that can run external code.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 6, 2026, 10:28 AM
Issues
2