審計歷史
cosmic-database - 4 審計
審計版本 4
最新 安全Jan 17, 2026, 06:32 AM
All 121 static findings are false positives. The analyzer misidentified markdown code fences (```) as shell backticks, documentation URLs as network threats, and fabricated cryptographic patterns. This is a legitimate Sanger Institute bioinformatics tool. The Python script only makes authenticated HTTPS requests to download cancer genomics data from the official COSMIC database.
低風險問題 (3)
風險因素
🌐 網路存取 (1)
📁 檔案系統存取 (1)
審計版本 3
安全Jan 17, 2026, 06:32 AM
All 121 static findings are false positives. The analyzer misidentified markdown code fences (```) as shell backticks, documentation URLs as network threats, and fabricated cryptographic patterns. This is a legitimate Sanger Institute bioinformatics tool. The Python script only makes authenticated HTTPS requests to download cancer genomics data from the official COSMIC database.
低風險問題 (3)
風險因素
🌐 網路存取 (1)
📁 檔案系統存取 (1)
審計版本 2
安全Jan 12, 2026, 05:03 PM
The skill is a legitimate bioinformatics tool for accessing the COSMIC cancer database. Static analysis flagged many false positives from documentation examples. The actual code only makes authenticated API requests to COSMIC and downloads cancer research data files.
低風險問題 (3)
風險因素
🌐 網路存取 (1)
📁 檔案系統存取 (1)
審計版本 1
低風險Jan 4, 2026, 05:02 PM
The skill performs authenticated HTTPS requests to the official COSMIC download service and saves files locally. No code execution, persistence mechanisms, or obfuscation detected. Capabilities match the stated purpose of downloading cancer genomics data.