Skills cosmic-database Audit History
🧬

Audit History

cosmic-database - 4 audits

Audit version 4

Latest Safe

Jan 17, 2026, 06:32 AM

All 121 static findings are false positives. The analyzer misidentified markdown code fences (```) as shell backticks, documentation URLs as network threats, and fabricated cryptographic patterns. This is a legitimate Sanger Institute bioinformatics tool. The Python script only makes authenticated HTTPS requests to download cancer genomics data from the official COSMIC database.

5
Files scanned
1,242
Lines analyzed
5
findings
claude
Audited by
Low Risk Issues (3)
Hardcoded COSMIC API URL
Hardcoded COSMIC API URL for legitimate data access
HTTP requests to COSMIC API
HTTP requests to COSMIC API for authenticated file downloads
File writing for database files
File writing to save downloaded COSMIC database files

Risk Factors

🌐 Network access (1)
📁 Filesystem access (1)

Audit version 3

Safe

Jan 17, 2026, 06:32 AM

All 121 static findings are false positives. The analyzer misidentified markdown code fences (```) as shell backticks, documentation URLs as network threats, and fabricated cryptographic patterns. This is a legitimate Sanger Institute bioinformatics tool. The Python script only makes authenticated HTTPS requests to download cancer genomics data from the official COSMIC database.

5
Files scanned
1,242
Lines analyzed
5
findings
claude
Audited by
Low Risk Issues (3)
Hardcoded COSMIC API URL
Hardcoded COSMIC API URL for legitimate data access
HTTP requests to COSMIC API
HTTP requests to COSMIC API for authenticated file downloads
File writing for database files
File writing to save downloaded COSMIC database files

Risk Factors

🌐 Network access (1)
📁 Filesystem access (1)

Audit version 2

Safe

Jan 12, 2026, 05:03 PM

The skill is a legitimate bioinformatics tool for accessing the COSMIC cancer database. Static analysis flagged many false positives from documentation examples. The actual code only makes authenticated API requests to COSMIC and downloads cancer research data files.

3
Files scanned
789
Lines analyzed
5
findings
claude
Audited by
Low Risk Issues (3)
Hardcoded COSMIC API URL
Hardcoded COSMIC API URL for legitimate data access
HTTP requests to COSMIC API
HTTP requests to COSMIC API for authenticated file downloads
File writing for database files
File writing to save downloaded COSMIC database files

Risk Factors

🌐 Network access (1)
📁 Filesystem access (1)

Audit version 1

Low Risk

Jan 4, 2026, 05:02 PM

The skill performs authenticated HTTPS requests to the official COSMIC download service and saves files locally. No code execution, persistence mechanisms, or obfuscation detected. Capabilities match the stated purpose of downloading cancer genomics data.

6
Files scanned
1,060
Lines analyzed
3
findings
claude
Audited by
No security issues found

Risk Factors

⚡ Contains scripts (1)
🌐 Network access (1)
📁 Filesystem access (1)