PubMed Search Specialist
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's files, instructions, and requirements are consistent with a PubMed query-builder tool and do not request unrelated credentials, installs, or persistent privileges.
This package appears to do what it says: build PubMed Boolean queries. Before running it, inspect scripts/main.py (you can read it or run `python -m py_compile scripts/main.py` as the SKILL.md suggests). Run the script in a Python virtualenv or isolated environment (it targets Python 3.10+). Be aware the tool will read any input file paths you give it — only supply files you trust. The requirements file includes 'requests' and 'dataclasses' even though 'dataclasses' is builtin for 3.10 and 'requests' is not obviously used; that is a minor mismatch but not malicious. If you need stronger assurance, run the script with harmless test inputs and/or in a sandboxed environment and search the code for any network calls or subprocess invocations before providing sensitive data or credentials (none are required by this skill).
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.