技能 cosmic-database 審計歷史
🧬

審計歷史

cosmic-database - 4 審計

審計版本 4

最新 安全

Jan 17, 2026, 06:32 AM

All 121 static findings are false positives. The analyzer misidentified markdown code fences (```) as shell backticks, documentation URLs as network threats, and fabricated cryptographic patterns. This is a legitimate Sanger Institute bioinformatics tool. The Python script only makes authenticated HTTPS requests to download cancer genomics data from the official COSMIC database.

5
已掃描檔案
1,242
分析行數
5
發現項
claude
審計者
低風險問題 (3)
Hardcoded COSMIC API URL
Hardcoded COSMIC API URL for legitimate data access
HTTP requests to COSMIC API
HTTP requests to COSMIC API for authenticated file downloads
File writing for database files
File writing to save downloaded COSMIC database files

風險因素

🌐 網路存取 (1)
📁 檔案系統存取 (1)

審計版本 3

安全

Jan 17, 2026, 06:32 AM

All 121 static findings are false positives. The analyzer misidentified markdown code fences (```) as shell backticks, documentation URLs as network threats, and fabricated cryptographic patterns. This is a legitimate Sanger Institute bioinformatics tool. The Python script only makes authenticated HTTPS requests to download cancer genomics data from the official COSMIC database.

5
已掃描檔案
1,242
分析行數
5
發現項
claude
審計者
低風險問題 (3)
Hardcoded COSMIC API URL
Hardcoded COSMIC API URL for legitimate data access
HTTP requests to COSMIC API
HTTP requests to COSMIC API for authenticated file downloads
File writing for database files
File writing to save downloaded COSMIC database files

風險因素

🌐 網路存取 (1)
📁 檔案系統存取 (1)

審計版本 2

安全

Jan 12, 2026, 05:03 PM

The skill is a legitimate bioinformatics tool for accessing the COSMIC cancer database. Static analysis flagged many false positives from documentation examples. The actual code only makes authenticated API requests to COSMIC and downloads cancer research data files.

3
已掃描檔案
789
分析行數
5
發現項
claude
審計者
低風險問題 (3)
Hardcoded COSMIC API URL
Hardcoded COSMIC API URL for legitimate data access
HTTP requests to COSMIC API
HTTP requests to COSMIC API for authenticated file downloads
File writing for database files
File writing to save downloaded COSMIC database files

風險因素

🌐 網路存取 (1)
📁 檔案系統存取 (1)

審計版本 1

低風險

Jan 4, 2026, 05:02 PM

The skill performs authenticated HTTPS requests to the official COSMIC download service and saves files locally. No code execution, persistence mechanisms, or obfuscation detected. Capabilities match the stated purpose of downloading cancer genomics data.

6
已掃描檔案
1,060
分析行數
3
發現項
claude
審計者
未發現安全問題

風險因素