Skill Trust Decision

mragent

Name: mragent Trust Review Report
Item: mragent
Rating: 80
Author: ClawSafe

MRAgent是合法的生物医学MR分析工具，代码质量良好，无恶意行为。唯一风险是README中包含远程脚本安装命令。

Install decision first Source: ClawHub Scanned: Apr 3, 2026

Files 33

Artifacts 37

Violations 0

Findings 3

Why this conclusion was reached

1/4 dimensions flagged

Pass

Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Block

Hidden execution and egress

2 high-risk artifacts or egress signals were extracted.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

README包含远程脚本执行命令 +15

mrmrmr/README.md:58 包含 `curl -fsSL https://ollama.com/install.sh | sh`，但这是安装说明，非代码执行

硬编码IP地址 +5

mrmrmr/.idea/deployment.xml:33 存在硬编码IP 172.25.18.14，但属于IDE配置，非运行时代码

Most important evidence

Medium

README包含远程脚本执行

README.md第58行包含 `curl -fsSL https://ollama.com/install.sh | sh` 命令用于安装Ollama。这是一种危险的安装模式，但属于用户操作指引而非代码自动执行。

mrmrmr/README.md:58

建议改为更安全的安装方式：1) 使用包管理器安装；2) 或分步下载验证后执行

Low

IDE配置文件包含硬编码IP

.idea/deployment.xml中硬编码了IP 172.25.18.14，属于开发环境配置，非运行时风险。

mrmrmr/.idea/deployment.xml:33

在.gitignore中排除IDE配置文件

Low

API密钥处理

代码接受AI_key和gwas_token作为参数，但不存储或外传，仅用于必要的API调用。

mrmrmr/mragent/LLM.py:1

最佳实践：可添加环境变量回退支持

Declared capability vs actual capability

Filesystem Pass

Declared READ

→

Inferred WRITE

SKILL.md声明需要pip install和R包安装

Network Pass

Declared READ

→

Inferred READ

仅访问PubMed、OpenGWAS、LLM API

Shell Pass

Declared WRITE

→

Inferred WRITE

仅调用 Rscript 执行MR分析，范围明确

Suspicious artifacts and egress

Critical Dangerous Command

curl -fsSL https://ollama.com/install.sh | sh

mrmrmr/README.md:58

High IP Address

172.25.18.14

mrmrmr/.idea/deployment.xml:33

Medium External URL

http://www.apache.org/licenses/

mrmrmr/LICENSE.txt:3

Medium External URL

http://www.apache.org/licenses/LICENSE-2.0

mrmrmr/LICENSE.txt:195

Medium External URL

https://doi.org/10.1093/bib/bbaf140

mrmrmr/README.md:2

Medium External URL

https://doi.org/10.5281/zenodo.14184396

mrmrmr/README.md:2

Medium External URL

https://huggingface.co/spaces/xuwei1997/MRAgent

mrmrmr/README.md:2

Medium External URL

https://p1bvxbwjxl0.feishu.cn/docx/L0ogdoDs5ofjIux6W6gct8E4nyd?from=from_copylink

mrmrmr/README.md:2

Medium External URL

https://www.python.org/

mrmrmr/README.md:27

Medium External URL

https://www.anaconda.com/download

mrmrmr/README.md:28

Medium External URL

https://www.r-project.org/

mrmrmr/README.md:30

Medium External URL

https://platform.openai.com/docs/overview

mrmrmr/README.md:47

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
pandas	`^1.4.2`	pip	No	已锁定版本
reportlab	`^4.0.9`	pip	No	已锁定版本
openai	`^1.6.1`	pip	No	已锁定版本
biopython	`^1.82`	pip	No	已锁定版本
requests	`^2.27.1`	pip	No	已锁定版本

File composition

33 files · 51721 lines

CSV 1 files · 46398 linesPython 18 files · 4530 linesMarkdown 2 files · 414 linesText 2 files · 210 linesXML 7 files · 131 linesTOML 1 files · 25 lines

Files of concern · 4

mrmrmr/mragent/agent_tool.py Python · 921 lines

https://gwas.mrcieu.ac.uk/datasets/?trait__icontains= · https://www.ncbi.nlm.nih.gov/research/bionlp/RESTful/pmcoa.cgi/BioC_json/[ID · https://www.ncbi.nlm.nih.gov/research/bionlp/RESTful/pmcoa.cgi/BioC_json/ · https://gwas.mrcieu.ac.uk/files/ · https://uts-ws.nlm.nih.gov/rest/search/current?apiKey= · https://uts-ws.nlm.nih.gov/rest/content/current/CUI/ · https://www.ebi.ac.uk/gwas/rest/api/studies/search · https://www.ebi.ac.uk/gwas/rest/api/studies/ · https://api.finngen.fi/api/phenos · https://api.finngen.fi/api/phenos/ · https://gwas-api.mrcieu.ac.uk/search · [email protected]

mrmrmr/web_demo.py Python · 486 lines

https://hm.baidu.com/hm.js?d8a4c130d7263e954bf9df2496e692c3

mrmrmr/README.md Markdown · 278 lines

README包含远程脚本执行 · curl -fsSL https://ollama.com/install.sh | sh · https://doi.org/10.1093/bib/bbaf140 · https://doi.org/10.5281/zenodo.14184396 · https://huggingface.co/spaces/xuwei1997/MRAgent · https://p1bvxbwjxl0.feishu.cn/docx/L0ogdoDs5ofjIux6W6gct8E4nyd?from=from_copylink · https://www.python.org/ · https://www.anaconda.com/download · https://www.r-project.org/ · https://platform.openai.com/docs/overview · https://markdown.com.cn · https://ollama.com/install.sh · https://api.opengwas.io/ · https://www.dropbox.com/s/5la7y38od95swcf/rf.rdata?dl=0 · https://www.strobe-mr.org/ · https://utexas.box.com/s/vkd36n197m8klbaio3yzoxsee6sxo11v · https://www.flaticon.com/

mrmrmr/LICENSE.txt Text · 201 lines

http://www.apache.org/licenses/ · http://www.apache.org/licenses/LICENSE-2.0

Other files · opengwas.csv · agent_workflow.py · step_9_test_prompt.py · template_text.py · run_mragent.py · step_9_test_out.py +2

33 files · 9.8 MB · 51721 lines

CSV 1f · 46398LPython 18f · 4530LMarkdown 2f · 414LText 2f · 210LXML 7f · 131LTOML 1f · 25LIgnore 1f · 8LJSON 1f · 5L

├─ ▾ 📁 mrmrmr

│ ├─ ▾ 📁 .idea

│ │ ├─ ▾ 📁 inspectionProfiles

│ │ │ ├─ 📄 Project_Default.xml XML 34L · 1.6 KB

│ │ │ └─ 📄 profiles_settings.xml XML 5L · 174 B

│ │ ├─ 📄 .gitignore Ignore 8L · 182 B

│ │ ├─ 📄 deployment.xml XML 62L · 1.9 KB

│ │ ├─ 📄 forwardedPorts.xml XML 12L · 353 B

│ │ ├─ 📄 misc.xml XML 6L · 282 B

│ │ ├─ 📄 modules.xml XML 7L · 266 B

│ │ └─ 📄 vcs.xml XML 5L · 180 B

│ ├─ ▾ 📁 mragent

│ │ ├─ 🐍 LLM.py Python 40L · 1.3 KB

│ │ ├─ 🐍 __init__.py Python 1L · 76 B

│ │ ├─ 🐍 agent_tool.py Python 921L · 31.0 KB

│ │ ├─ 🐍 agent_workflow.py Python 1102L · 47.0 KB

│ │ ├─ 🐍 agent_workflow_OE.py Python 27L · 1.5 KB

│ │ └─ 🐍 template_text.py Python 263L · 23.1 KB

│ ├─ 📄 LICENSE.txt Text 201L · 11.1 KB

│ ├─ 📝 README.md Markdown 278L · 15.1 KB

│ ├─ 🐍 agent_workflow_OE_demo.py Python 12L · 389 B

│ ├─ 🐍 agent_workflow_demo.py Python 15L · 538 B

│ ├─ 📄 pyproject.toml TOML 25L · 604 B

│ ├─ 🐍 step_1_test_SimCSE.py Python 163L · 5.8 KB

│ ├─ 🐍 step_1_test_out.py Python 173L · 6.2 KB

│ ├─ 🐍 step_2_test.py Python 80L · 2.6 KB

│ ├─ 🐍 step_2_test_STROBE_MR.py Python 91L · 3.8 KB

│ ├─ 🐍 step_5_test.py Python 144L · 4.6 KB

│ ├─ 🐍 step_9_test_SimCSE.py Python 83L · 2.4 KB

│ ├─ 🐍 step_9_test_out.py Python 199L · 8.5 KB

│ ├─ 🐍 step_9_test_prompt.py Python 415L · 26.2 KB

│ └─ 🐍 web_demo.py Python 486L · 16.3 KB

├─ 📝 SKILL.md Markdown 136L · 6.5 KB

├─ 📋 _meta.json JSON 5L · 125 B

├─ 📄 opengwas.csv CSV 46398L · 9.5 MB

├─ 📄 requirements.txt Text 9L · 142 B

└─ 🐍 run_mragent.py Python 315L · 10.3 KB

Security positives

代码结构清晰，无混淆或反编译迹象

凭证仅作为参数传递，不存储不外传

所有第三方依赖均有版本锁定

无凭证收割、环境变量遍历等恶意行为

网络请求仅访问合法的生物医学API

R脚本执行范围明确，仅用于MR分析

完整的数据处理和PDF报告生成功能

支持多种GWAS数据源（OpenGWAS、GWAS Catalog、FinnGen、UK Biobank）