eqtl-catalogue-skill

The code is a readable configurable HTTP integration utility, not evident malware. It has significant security risks if stdin is attacker-controlled: arbitrary URL access can enable SSRF and arbitrary request forwarding, while raw_output_path permits path traversal or file overwrite within process permissions. These risks should be mitigated by allowlisting destinations, restricting schemes and private-network access, validating headers and bodies, and constraining output paths.