Pubmed Edirect

• Analyzed: May 12, 2026, 3:34 AM
• Findings: 1
• Version: 0.4.4
• Hash: afb12cda6a447e99626b2457890f30bd0361e28cd0b520d72a59edb76e223052
• Source: palm
• External report: View on VirusTotal

Findings (1)

This OpenClaw skill is designed for legitimate PubMed data retrieval and analysis using NCBI's EDirect command-line tools. The documentation (SKILL.md, INSTALL.md, OPENCLAW_INTEGRATION.md) is exceptionally transparent and responsible, explicitly warning users about the elevated security risks of manual installation, external script execution, and system modifications. It provides clear instructions for secure installation, including reviewing scripts before execution, and explicitly prohibits unsafe practices like piping remote scripts directly to a shell. The included shell scripts are well-written, perform tasks aligned with the stated purpose, and do not contain any malicious code patterns such as data exfiltration, persistence, or unauthorized network calls. There is no evidence of prompt injection attempts against the AI agent; instead, the markdown consistently instructs the *user* on secure practices and how to use the skill effectively.