finngen-phewas-skill
Warn
Audited by Socket on Sep 20, 2026
1 alert found:
AnomalyAnomalyscripts/finngen_phewas.py
LOWAnomalyLOW
scripts/finngen_phewas.py
The fragment appears to be a legitimate FinnGen variant/PheWAS client and contains no clear malware, credential theft, exfiltration, persistence, or code-injection behavior. The optional raw_output_path feature permits arbitrary filesystem writes and directory creation under the process account, including potentially sensitive locations; it should be restricted to an approved output directory or validated against path traversal and absolute paths. Assessment of the imported variant_resolution module requires that module's source.
Confidence: 97%Severity: 58%
Audit Metadata