Audit-Verlauf
cosmic-database - 4 Audits
Audit-Version 4
Neueste SicherJan 17, 2026, 06:32 AM
All 121 static findings are false positives. The analyzer misidentified markdown code fences (```) as shell backticks, documentation URLs as network threats, and fabricated cryptographic patterns. This is a legitimate Sanger Institute bioinformatics tool. The Python script only makes authenticated HTTPS requests to download cancer genomics data from the official COSMIC database.
Probleme mit niedrigem Risiko (3)
Risikofaktoren
🌐 Netzwerkzugriff (1)
📁 Dateisystemzugriff (1)
Audit-Version 3
SicherJan 17, 2026, 06:32 AM
All 121 static findings are false positives. The analyzer misidentified markdown code fences (```) as shell backticks, documentation URLs as network threats, and fabricated cryptographic patterns. This is a legitimate Sanger Institute bioinformatics tool. The Python script only makes authenticated HTTPS requests to download cancer genomics data from the official COSMIC database.
Probleme mit niedrigem Risiko (3)
Risikofaktoren
🌐 Netzwerkzugriff (1)
📁 Dateisystemzugriff (1)
Audit-Version 2
SicherJan 12, 2026, 05:03 PM
The skill is a legitimate bioinformatics tool for accessing the COSMIC cancer database. Static analysis flagged many false positives from documentation examples. The actual code only makes authenticated API requests to COSMIC and downloads cancer research data files.
Probleme mit niedrigem Risiko (3)
Risikofaktoren
🌐 Netzwerkzugriff (1)
📁 Dateisystemzugriff (1)
Audit-Version 1
Niedriges RisikoJan 4, 2026, 05:02 PM
The skill performs authenticated HTTPS requests to the official COSMIC download service and saves files locally. No code execution, persistence mechanisms, or obfuscation detected. Capabilities match the stated purpose of downloading cancer genomics data.