Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed bioinformatics automation helper that creates analysis folders, R scripts, outputs, and Chinese reports, with some usability caution around broad triggers and automatic output generation.
Before installing, make sure you want a bioinformatics workflow that may create many folders/files, generate and run R scripts, and produce reports in Chinese. Use it in a dedicated project directory and confirm the analysis strategy and output location before running generated code.
The description promotes automation and auto-organization but does not clearly warn users that the skill may create substantial directory structures, generate scripts, and write numerous output artifacts. In a system that responds to broad triggers, insufficient disclosure increases the risk of users unknowingly authorizing disruptive file-system changes.
Forcing Chinese report generation without an opt-in or language selection can cause unexpected data handling, extra file creation, and user confusion, especially in multilingual or regulated environments. While not directly enabling code execution, it reduces user control over outputs and may create inappropriate or unusable deliverables.
The keyword trigger "run analysis" is generic and likely to appear in many normal conversations, which can cause this skill to activate outside the user's explicit intent to use this bioinformatics workflow. Because the skill is designed to auto-generate scripts, create directories, and save many files, accidental invocation could lead to unexpected workspace changes and downstream execution prompts.
The description states that the skill performs comprehensive Chinese report generation without indicating this is optional, which can lead to outputs being produced in a language the user did not request. While this is not a direct code-execution issue, it creates a consent and usability problem and can cause miscommunication or inappropriate handling of analysis results in multilingual environments.
The trigger keywords are broad, generic, and overlap with common analysis and file-management phrases, which increases the chance the skill is invoked in contexts the user did not specifically intend. Because this skill advertises automated organization, script generation, and execution in R/RStudio, unintended invocation could cause unwanted processing of files, output generation, or changes to a workspace.
The keyword trigger "bioinformatics" is overly broad because it matches general discussion about a subject area rather than an explicit request to use this skill. This raises the chance of unintended activation, though the impact is somewhat limited unless the platform permits immediate side effects without confirmation.
No suspicious patterns detected.
