Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Facs Gating Viz Style

Beautify FACS gating plots for publication

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 21 · 0 current installs · 0 all-time installs
byAIpoch@AIPOCH-AI
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description say 'beautify FACS gating plots' and SKILL.md lists contour/density/dot styling and publication-ready output, but the included script (scripts/main.py) does not read the FCS file, perform plotting, or write output. SKILL.md also states 'No additional Python packages required', which is inconsistent with typical plotting workflows (matplotlib, numpy, etc.). This suggests the package is incomplete or misleading about capabilities.
Instruction Scope
Runtime instructions tell the agent/user to run python scripts/main.py --data fcs_file.fcs and imply reading input and writing output. The actual script accepts a --data argument but only prints messages and does not access the filesystem or network. There are no instructions that read unrelated files, exfiltrate data, or call external endpoints.
Install Mechanism
No install spec (instruction-only plus a small script). Nothing is downloaded or written to disk by an installer. This is the lowest-risk install mechanism.
Credentials
No environment variables, credentials, or config paths are requested. The skill does not ask for unrelated secrets or unusual system access.
Persistence & Privilege
Flags are default (always=false, user-invocable=true, model invocation allowed). The skill does not request persistent presence, nor does it modify other skills or system-wide settings.
What to consider before installing
This package appears to be a stub: the script accepts a data path and style but only prints status messages and does not read the FCS file, generate plots, or write outputs. That mismatch could be an honest incomplete draft or careless packaging rather than malicious code, but you should not assume it performs the advertised work. Before installing or using this in a production workflow: (1) request a full implementation or source that actually performs plotting and specifies required Python packages (e.g., matplotlib, numpy, FlowCal, fcsparser), (2) review any future code that performs file I/O to ensure it validates input paths (prevent ../ traversal) and handles sensitive files safely, (3) run the code in a sandboxed environment and inspect outputs, and (4) prefer a version that declares and pins dependencies. If you need production-grade plotting now, use a known library or a vetted package rather than this draft.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.0
Download zip
latestvk978ypk397zyrqt1ppx10snsn9839n20

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

FACS Gating Viz Style

Beautify flow cytometry gating plots for publication.

Parameters

ParameterTypeDefaultRequiredDescription
--data, -dstring-YesFCS file path
--style, -sstringcontourNoPlot style (contour, density, dot)

Usage

python scripts/main.py --data fcs_file.fcs --style contour

Features

  • Contour plots
  • Density visualization
  • Publication-ready styling

Risk Assessment

Risk IndicatorAssessmentLevel
Code ExecutionPython/R scripts executed locallyMedium
Network AccessNo external API callsLow
File System AccessRead input files, write output filesMedium
Instruction TamperingStandard prompt guidelinesLow
Data ExposureOutput files saved to workspaceLow

Security Checklist

  • No hardcoded credentials or API keys
  • No unauthorized file system access (../)
  • Output does not expose sensitive information
  • Prompt injection protections in place
  • Input file paths validated (no ../ traversal)
  • Output directory restricted to workspace
  • Script execution in sandboxed environment
  • Error messages sanitized (no stack traces exposed)
  • Dependencies audited

Prerequisites

No additional Python packages required.

Evaluation Criteria

Success Metrics

  • Successfully executes main functionality
  • Output meets quality standards
  • Handles edge cases gracefully
  • Performance is acceptable

Test Cases

  1. Basic Functionality: Standard input → Expected output
  2. Edge Case: Invalid input → Graceful error handling
  3. Performance: Large dataset → Acceptable processing time

Lifecycle Status

  • Current Stage: Draft
  • Next Review Date: 2026-03-06
  • Known Issues: None
  • Planned Improvements:
    • Performance optimization
    • Additional feature support

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…