💊

審計歷史

drugbank-database - 4 審計

審計版本 4

最新 安全

Jan 17, 2026, 06:51 AM

This is a legitimate scientific skill for accessing the DrugBank bioinformatics database. All 353 static findings are FALSE POSITIVES caused by the analyzer misinterpreting Markdown code block syntax and bioinformatics terminology. The skill uses the official drugbank-downloader package for authenticated access to a recognized public database. No actual security risks were identified after manual evaluation.

8
已掃描檔案
2,964
分析行數
4
發現項
claude
審計者
未發現安全問題

審計版本 3

安全

Jan 17, 2026, 06:51 AM

This is a legitimate scientific skill for accessing the DrugBank bioinformatics database. All 353 static findings are FALSE POSITIVES caused by the analyzer misinterpreting Markdown code block syntax and bioinformatics terminology. The skill uses the official drugbank-downloader package for authenticated access to a recognized public database. No actual security risks were identified after manual evaluation.

8
已掃描檔案
2,964
分析行數
4
發現項
claude
審計者
未發現安全問題

審計版本 2

安全

Jan 12, 2026, 04:28 PM

This is a legitimate scientific skill for accessing the DrugBank bioinformatics database. All 342 static findings are FALSE POSITIVES caused by the analyzer misinterpreting Markdown code block syntax and bioinformatics terminology. The skill uses the official drugbank-downloader package for authenticated access to a recognized public database.

7
已掃描檔案
2,707
分析行數
3
發現項
claude
審計者
未發現安全問題

風險因素

⚙️ 外部命令 (1)
🌐 網路存取 (1)
📁 檔案系統存取 (1)

審計版本 1

低風險

Jan 4, 2026, 05:15 PM

The skill is documentation and a local XML helper script. It includes example API calls and local caching paths, which introduce limited network and filesystem exposure when used. The helper script only parses XML data with no network calls, command execution, or credential theft.

10
已掃描檔案
2,960
分析行數
5
發現項
claude
審計者
低風險問題 (2)
API requests transmit data to DrugBank
Documentation includes REST API examples: `url = f"https://go.drugbank.com/drugs/{drug_id}.json"` and `response = requests.get(url, headers=headers)`. This sends API credentials over the network when using the DrugBank API.
Cache writes to user home directory
Examples write cached data in user home: `drugbank_dir = Path.home() / '.data' / 'drugbank'` and `with open(cache_file, 'wb') as f:`. This writes outside the skill directory for data caching.