Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

GO/KEGG Enrichment

v1.0.0

Performs GO (Gene Ontology) and KEGG pathway enrichment analysis on gene lists. Trigger when: - User provides a list of genes (symbols or IDs) and asks for e...

0· 383·2 current·2 all-time
byAIpoch@aipoch-ai
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the included code: the repo provides a script to perform GO/KEGG enrichment and visualization. However, the SKILL.md repeatedly describes an R/Bioconductor pipeline (clusterProfiler, org.*.eg.db) while the included script (scripts/main.py) is a pure-Python pipeline using gseapy. Both Python and R dependencies appear in documentation/requirements files, which is inconsistent but could be bookkeeping/sloppiness rather than malicious.
Instruction Scope
Instructions are within the stated functional scope (read a gene list, run enrichment, write results/plots). They expect network access for Enrichr/KEGG queries. Inconsistencies: SKILL.md and the risk table contain contradictory statements about network/API usage (mentions KEGG REST API but also states 'No external API calls' in a truncated table). No instructions attempt to read unrelated system files, sensitive environment variables, or contact unknown endpoints.
Install Mechanism
There is no automatic install spec (instruction-only install), so nothing is downloaded or executed implicitly by the platform. The package includes requirements.txt and references/requirements.txt listing Python libraries (gseapy, pandas, etc.) and documentation that lists R/Bioconductor packages; installation is manual. This is low install-mechanism risk, though the user will need to install Python packages (and possibly R packages if they follow the R instructions).
Credentials
The skill requests no environment variables or credentials. Network access to public enrichment services (Enrichr, KEGG) is expected for normal operation. There are no requests for unrelated secrets or system config paths.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it does not request elevated/persistent platform privileges. It does not attempt to modify other skills or system-wide settings.
What to consider before installing
This package appears to implement GO/KEGG enrichment, but there are inconsistencies you should resolve before running it: (1) Decide whether you intend to use an R/clusterProfiler pipeline or the provided Python script (scripts/main.py uses gseapy). The README/SKILL.md mixes both—follow the actual script or ask the author to clarify. (2) Expect network calls to Enrichr/KEGG when using online options; do not submit confidential gene lists if privacy is a concern. (3) Install Python dependencies from requirements.txt in a virtual environment; if you follow the R instructions they are separate and unnecessary for the Python script. (4) Verify KEGG usage terms for your use case (academic vs commercial). (5) Run the code in an isolated environment (virtualenv or container) and inspect outputs before trusting automated interpretation. If you need higher assurance, ask the publisher to clarify the R vs Python discrepancy and to provide an explicit install/run README matching the actual code.

Like a lobster shell, security has layers — review code before you run it.

Data-analysisvk9759fj65saqdga4879e4m3w518215tmEnrichment analysisvk9759fj65saqdga4879e4m3w518215tmGO/KEGGvk9759fj65saqdga4879e4m3w518215tmlatestvk9759fj65saqdga4879e4m3w518215tm
383downloads
0stars
1versions
Updated 9h ago
v1.0.0
MIT-0

GO/KEGG Enrichment Analysis

Automated pipeline for Gene Ontology and KEGG pathway enrichment analysis with result interpretation and visualization.

Features

  • GO Enrichment: Biological Process (BP), Molecular Function (MF), Cellular Component (CC)
  • KEGG Pathway: Pathway enrichment with organism-specific mapping
  • Multiple ID Support: Gene symbols, Entrez IDs, Ensembl IDs, RefSeq
  • Statistical Methods: Hypergeometric test, Fisher's exact test, GSEA support
  • Visualizations: Bar plots, dot plots, enrichment maps, cnet plots
  • Result Interpretation: Automatic biological significance summary

Supported Organisms

Common NameScientific NameKEGG CodeOrgDB Package
HumanHomo sapienshsaorg.Hs.eg.db
MouseMus musculusmmuorg.Mm.eg.db
RatRattus norvegicusrnoorg.Rn.eg.db
ZebrafishDanio reriodreorg.Dr.eg.db
FlyDrosophila melanogasterdmeorg.Dm.eg.db
YeastSaccharomyces cerevisiaesceorg.Sc.sgd.db

Usage

Basic Usage

# Run enrichment analysis with gene list
python scripts/main.py --genes gene_list.txt --organism human --output results/

Parameters

ParameterDescriptionDefaultRequired
--genesPath to gene list file (one gene per line)-Yes
--organismOrganism code (human/mouse/rat/zebrafish/fly/yeast)humanNo
--id-typeGene ID type (symbol/entrez/ensembl/refseq)symbolNo
--backgroundBackground gene list fileall genesNo
--pvalue-cutoffP-value cutoff for significance0.05No
--qvalue-cutoffAdjusted p-value (q-value) cutoff0.2No
--analysisAnalysis type (go/kegg/all)allNo
--outputOutput directory./enrichment_resultsNo
--formatOutput format (csv/tsv/excel/all)allNo

Advanced Usage

# GO enrichment only with specific ontology
python scripts/main.py \
    --genes deg_upregulated.txt \
    --organism mouse \
    --analysis go \
    --go-ontologies BP,MF \
    --pvalue-cutoff 0.01 \
    --output go_results/

# KEGG enrichment with custom background
python scripts/main.py \
    --genes treatment_genes.txt \
    --background all_expressed_genes.txt \
    --organism human \
    --analysis kegg \
    --qvalue-cutoff 0.05 \
    --output kegg_results/

Input Format

Gene List File

TP53
BRCA1
EGFR
MYC
KRAS
PTEN

With Expression Values (for GSEA)

gene,log2FoldChange
TP53,2.5
BRCA1,-1.8
EGFR,3.2

Output Files

output/
├── go_enrichment/
│   ├── GO_BP_results.csv       # Biological Process results
│   ├── GO_MF_results.csv       # Molecular Function results
│   ├── GO_CC_results.csv       # Cellular Component results
│   ├── GO_BP_barplot.pdf       # Visualization
│   ├── GO_MF_dotplot.pdf
│   └── GO_summary.txt          # Interpretation summary
├── kegg_enrichment/
│   ├── KEGG_results.csv        # Pathway results
│   ├── KEGG_barplot.pdf
│   ├── KEGG_dotplot.pdf
│   └── KEGG_pathview/          # Pathway diagrams
└── combined_report.html        # Interactive report

Result Interpretation

The tool automatically generates biological interpretation including:

  1. Top Enriched Terms: Significant GO terms/pathways ranked by enrichment ratio
  2. Functional Themes: Clustered biological themes from enriched terms
  3. Key Genes: Core genes driving enrichment in significant terms
  4. Network Relationships: Gene-term relationship visualization
  5. Clinical Relevance: Disease associations (for human genes)

Technical Difficulty: HIGH

⚠️ AI自主验收状态: 需人工检查

This skill requires:

  • R/Bioconductor environment with clusterProfiler
  • Multiple annotation databases (org.*.eg.db)
  • KEGG REST API access
  • Complex visualization dependencies

Dependencies

Required R Packages

install.packages(c("BiocManager", "ggplot2", "dplyr", "readr"))
BiocManager::install(c(
    "clusterProfiler", 
    "org.Hs.eg.db", "org.Mm.eg.db", "org.Rn.eg.db",
    "enrichplot", "pathview", "DOSE"
))

Python Dependencies

pip install pandas numpy matplotlib seaborn rpy2

Example Workflow

  1. Prepare Input: Create gene list from DEG analysis
  2. Run Analysis: Execute main.py with appropriate parameters
  3. Review Results: Check generated CSV files and visualizations
  4. Interpret: Read auto-generated summary for biological insights

References

See references/ for:

  • clusterProfiler documentation
  • KEGG API guide
  • Statistical methods explanation
  • Visualization examples

Limitations

  • Requires internet connection for KEGG database queries
  • Large gene lists (>5000) may require increased memory
  • Some pathways may not be available for all organisms
  • KEGG API has rate limits (max 3 requests/second)

Risk Assessment

Risk IndicatorAssessmentLevel
Code ExecutionPython/R scripts executed locallyMedium
Network AccessNo external API callsLow
File System AccessRead input files, write output filesMedium
Instruction TamperingStandard prompt guidelinesLow
Data ExposureOutput files saved to workspaceLow

Security Checklist

  • No hardcoded credentials or API keys
  • No unauthorized file system access (../)
  • Output does not expose sensitive information
  • Prompt injection protections in place
  • Input file paths validated (no ../ traversal)
  • Output directory restricted to workspace
  • Script execution in sandboxed environment
  • Error messages sanitized (no stack traces exposed)
  • Dependencies audited

Prerequisites

# Python dependencies
pip install -r requirements.txt

Evaluation Criteria

Success Metrics

  • Successfully executes main functionality
  • Output meets quality standards
  • Handles edge cases gracefully
  • Performance is acceptable

Test Cases

  1. Basic Functionality: Standard input → Expected output
  2. Edge Case: Invalid input → Graceful error handling
  3. Performance: Large dataset → Acceptable processing time

Lifecycle Status

  • Current Stage: Draft
  • Next Review Date: 2026-03-06
  • Known Issues: None
  • Planned Improvements:
    • Performance optimization
    • Additional feature support

Comments

Loading comments...