finngen-phewas-skill

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/finngen_phewas.py

The fragment appears to be a legitimate FinnGen variant/PheWAS client and contains no clear malware, credential theft, exfiltration, persistence, or code-injection behavior. The optional raw_output_path feature permits arbitrary filesystem writes and directory creation under the process account, including potentially sensitive locations; it should be restricted to an approved output directory or validated against path traversal and absolute paths. Assessment of the imported variant_resolution module requires that module's source.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Sep 20, 2026, 12:21 PM
Package URL
pkg:socket/skills-sh/openai%2Fplugins%2Ffinngen-phewas-skill%2F@f45db97a2a41a1096aca67e82e5bb6faa5166e19b4e436c2a612ef20ee9eb0a7