Dual Disease Transcriptomic Ml Planner

PassAudited by ClawScan on May 1, 2026.

Overview

This is a benign instruction-only research-planning skill, with only normal user-directed use of external bioinformatics tools and R package installs to notice.

This skill appears safe to install as an instruction-only planner. Before following its generated research workflow, install analysis packages only from trusted sources and be careful with any external web service if your data is not already public.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the user follows the analysis plan, they may install third-party R packages that run code locally.

Why it was flagged

The reference documentation recommends installing R/Bioconductor/CRAN packages as part of the user’s bioinformatics workflow. This is expected for the skill’s purpose, but package installation introduces ordinary dependency-provenance considerations.

Skill content

Data retrieval | GEOquery | `BiocManager::install("GEOquery")` ... PPI construction | STRINGdb | `install.packages("STRINGdb")` ... Co-expression | WGCNA | `install.packages("WGCNA")`

Recommendation

Install packages from official repositories, use an isolated R environment, and avoid running package-install commands from untrusted mirrors or modified instructions.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Using external analysis sites may require an account and may involve submitting expression data or analysis inputs to a third-party service.

Why it was flagged

The workflow points users to external bioinformatics web services, including one requiring registration. This is disclosed and aligned with transcriptomic analysis, but it means data may be processed outside the local environment if the user uses those services.

Skill content

CIBERSORT / CIBERSORT-X | https://cibersortx.stanford.edu (registration required) ... TIMER2.0 | http://timer.cistrome.org

Recommendation

Use public GEO datasets as intended, review each service’s privacy and data-use terms, and avoid uploading confidential or unpublished data unless permitted.