Pharmaclaw Pharmacology Agent
Analysis
The artifacts consistently implement a local SMILES-to-ADME profiling helper with no evidence of credential access, persistence, data exfiltration, or destructive behavior.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
exec python scripts/chain_entry.py --input-json '{"smiles": "CC(=O)Oc1ccccc1C(=O)O", "context": "user"}'The skill's normal use involves running a bundled local Python script. This is disclosed and purpose-aligned for computing pharmacology descriptors, but it still means the user is trusting local code and its Python/RDKit dependencies.
