cosmic-database

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill's behavior is consistent with its stated purpose of assisting in cancer research and precision oncology.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates downloading large datasets from the official COSMIC domain (cancer.sanger.ac.uk). These downloads are triggered by the user and target a well-known scientific repository managed by the Wellcome Sanger Institute.
  • [COMMAND_EXECUTION]: The included Python script (scripts/download_cosmic.py) provides a command-line interface for data retrieval. It uses standard libraries (requests, argparse) and follows secure practices such as using getpass for sensitive credential entry.
  • [CREDENTIALS_UNSAFE]: While the skill handles user credentials (email and password), it does so to authenticate with the official COSMIC API over HTTPS. No hardcoded credentials or insecure storage patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 07:58 PM