Rstudio Research Agent
v0.1.0Interact with R and RStudio environments for scientific research tasks including creating projects, running analyses, managing dependencies, and generating p...
⭐ 2· 313·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and declared capabilities (project scaffolding, renv, running R/RMarkdown/quarto, plotting, debugging) match the instructions across the main SKILL.md and sub-skill files. Requested actions (activating renv, sourcing scripts, initializing Git, generating plots, and producing package install commands) are expected for this purpose.
Instruction Scope
The SKILL.md instructs the agent to set working directories, activate renv, source and execute arbitrary R scripts and render reports. That is appropriate for running analyses, but it means the skill will execute whatever R code exists in the project (which can perform arbitrary filesystem and network actions). The skill also generates and may suggest running install commands (CRAN, Bioconductor, GitHub) which require network access. Users should be aware the agent will run code with the permissions of the host process.
Install Mechanism
There is no install spec or downloaded code — this is instruction-only. No external archives or package installs are performed by the skill itself; package installation happens at R runtime (install.packages, BiocManager::install, remotes::install_github) which is expected for the described features.
Credentials
The skill declares no environment variables, credentials, or config paths beyond working within a project directory and using renv. It does not request unrelated secrets or system credentials, which is proportionate to its stated functionality.
Persistence & Privilege
always:false and no special privileges are requested. The skill can create files (project scaffolding, .Rproj, renv.lock, .gitignore) and optionally initialize Git — these actions are consistent with its purpose and limited to the project scope rather than system-wide privileged changes.
Assessment
This skill is coherent for R research automation, but it will execute R scripts and may install packages from CRAN/Bioconductor/GitHub — actions that can access files, run shell commands via R, or download code. Only let the skill run on projects and code you trust, or run it inside an isolated environment (container/VM) with limited network and filesystem access. Review any generated install commands before executing (especially GitHub installs), back up sensitive data, and prefer using renv lockfiles to ensure reproducible package versions. Absence of automated scan findings here is expected (instruction-only skill) and does not remove the runtime risk of executing untrusted R code.Like a lobster shell, security has layers — review code before you run it.
latestvk97046rvj3w1edct2gyratgfvd81y9x1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
