cosmic-database
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill's behavior is consistent with its stated purpose of assisting in cancer research and precision oncology.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading large datasets from the official COSMIC domain (
cancer.sanger.ac.uk). These downloads are triggered by the user and target a well-known scientific repository managed by the Wellcome Sanger Institute. - [COMMAND_EXECUTION]: The included Python script (
scripts/download_cosmic.py) provides a command-line interface for data retrieval. It uses standard libraries (requests, argparse) and follows secure practices such as usinggetpassfor sensitive credential entry. - [CREDENTIALS_UNSAFE]: While the skill handles user credentials (email and password), it does so to authenticate with the official COSMIC API over HTTPS. No hardcoded credentials or insecure storage patterns were found.
Audit Metadata