Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Running R Analysis In Existing Projects
v0.1.0Work inside an existing R project to extend analyses, modify scripts, run statistical models, update visualizations, and regenerate reports.
⭐ 0· 493·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (extend/debug R projects) matches the behavior described in SKILL.md and README: reading project files, adding models/plots, installing missing R packages, and re-rendering reports. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions explicitly operate on project files and standard R artifacts (.Rproj, .Rmd, .qmd, scripts, data/, results/, reports/). The skill will read and modify code and run R rendering commands (rmarkdown::render, quarto render), which is appropriate for the declared purpose. Note: executing user R code and installing packages are powerful actions but expected for this skill.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to run. The README/SKILL.md indicate using install.packages() or BiocManager::install() when packages are missing — that is standard for R workflows and is not an installer downloading arbitrary executables.
Credentials
No environment variables, credentials, or config paths are requested. The only external access implied is network access to CRAN/Bioconductor to install R packages, which is proportional to the stated functionality.
Persistence & Privilege
The skill is not forced-always and does not request persistent system-wide privileges. It does write outputs into project folders (results/, reports/) as expected; this is scoped to the project and within the skill's purpose.
Assessment
This skill is coherent for extending and rerunning analyses in an R project, but it will read and modify your project files, execute R code, and may install R packages from CRAN/Bioconductor. Before installing/using it: back up the project or use version control, run the skill in an isolated environment if possible, review diffs of any code changes the skill proposes, and verify installed packages come from trusted repositories (use renv/lockfiles when available). Refuse or inspect any changes you don't expect (especially code that accesses external networks or secrets).Like a lobster shell, security has layers — review code before you run it.
latestvk9747y1hpem29nwqwqaa7pwkyh81wvck
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
