Precision Oncology

AdvisoryAudited by Static analysis on May 13, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

The skill may use the user's PatSnap account access and any associated quotas, billing, or permissions.

Why it was flagged

The skill requires a PatSnap API key, which is sensitive account authority. This is disclosed and fits the PatSnap oncology-data purpose, but users should understand the credential requirement.

Skill content

Log in to https://open.patsnap.com, go to **API Keys**, and create a new key.

Recommendation

Use a dedicated, least-privileged PatSnap API key if available, rotate it if exposed, and avoid sharing it in chat or public logs.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Cancer research questions, target names, disease areas, or other query details may leave the local agent environment and be processed by the external provider.

Why it was flagged

The skill depends on a remote MCP service. This is central to its life-science intelligence function, but it means user queries and tool requests may be sent to PatSnap's service.

Skill content

claude mcp add --transport http pharma_intelligence \
  "https://connect.patsnap.com/096456/logic-mcp?apiKey=sk-xxxxxxxxxxxx"

Recommendation

Verify the PatSnap endpoint and terms before connecting, and avoid sending confidential patient-identifiable or proprietary data unless the service is approved for that use.

Note

ASI02: Tool Misuse and Exploitation

What this means

A small external API call may occur whenever the skill starts handling a relevant query, and the skill will refuse to proceed if the MCP connection fails.

Why it was flagged

The skill requires an initial MCP tool call, such as querying EGFR, before handling the user's substantive request. This is disclosed and low-impact, but users should know tool use is part of the normal workflow.

Skill content

Before processing any user query after this skill loads, the following connectivity check MUST be performed.

Recommendation

Confirm that PatSnap MCP access is intentionally configured and expected before invoking the skill for oncology research tasks.