Volcano Plot Labeler

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward local plotting helper, with normal cautions around installing Python packages and reading or writing user-selected files.

This skill looks appropriate for local scientific plotting. Before installing, use a virtual environment, keep input and output paths limited to your project folder, and be mindful that generated plots may reveal gene names or analysis results if shared.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill may pull the latest available versions of these packages, which can affect reproducibility or inherit upstream package risk.

Why it was flagged

The dependencies are common and purpose-aligned, but they are not version-pinned, so installs may vary over time.

Skill content
matplotlib
numpy
pandas
Recommendation

Install in a virtual environment and pin dependency versions if you need reproducible or controlled execution.

What this means

The script runs in the user's Python environment and processes files the user points it at.

Why it was flagged

The skill instructs users to run a local Python script, which is expected for this plotting tool but still means local code execution occurs.

Skill content
python scripts/main.py \
    --input data/deseq2_results.csv \
    --output volcano_labeled.png
Recommendation

Run it only from the reviewed skill directory, preferably in a virtual environment, and use explicit input and output paths.

What this means

If the user chooses sensitive input files or shared output locations, the generated plot may contain selected gene labels or analysis details.

Why it was flagged

The artifacts disclose local file reading and writing, which matches the purpose of loading data and saving plots.

Skill content
| File System Access | Read input files, write output files | Medium |
Recommendation

Use scoped project paths and avoid saving outputs with sensitive labels into shared workspaces unless intended.