ClawHub
Back to skill

Security audit

Crispr Screen Analyzer

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent local CRISPR screen analysis tool with ordinary dependency-hygiene caveats, not evidence of malicious behavior.

Install this only where you are comfortable running local Python analysis over CRISPR screening data. Review any Bash command before execution, keep outputs in an intended project directory, and consider pinning numpy, pandas, and scipy versions before use for reproducible results.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Unpinned Dependencies

Low
Category
Supply Chain
Content
numpy
pandas
scipy
Confidence
96% confidence
Finding
The dependency is unpinned, so installs may resolve to different versions over time, including versions with newly introduced bugs or known vulnerabilities. This creates a supply-chain and reproducibility risk because the environment is not deterministic and security posture can change without code changes.

Unpinned Dependencies

Low
Category
Supply Chain
Content
numpy
pandas
scipy
Confidence
96% confidence
Finding
The pandas dependency is unpinned, allowing arbitrary future versions to be installed depending on resolver behavior and package index state. That increases the chance of pulling in a vulnerable or incompatible release and makes builds non-reproducible.

Unpinned Dependencies

Low
Category
Supply Chain
Content
numpy
pandas
scipy
Confidence
96% confidence
Finding
An unpinned scipy requirement means the package manager may install any available version satisfying defaults, including outdated or later vulnerable releases. This weakens supply-chain control and makes security review of the environment unreliable.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.