personal-genomics 安全扫描报告 — 可信 | ClawSafe

0 /100

personal-genomics

Analyze consumer DNA data from WeGene, 23andMe, AncestryDNA, VCF, BAM, CRAM files and generate evidence-based health reports

Legitimate personal genomics analysis skill with no malicious behavior detected. All functionality matches declared purpose.

技能名称personal-genomics

分析耗时26.3s

引擎pi

✓

可以安装

No action required. Skill is safe for use.

资源类型	声明权限	推断权限	状态	证据
文件系统	`READ`	`READ`	✓ 一致	SKILL.md declares file reading for genetic data ingestion
文件系统	`WRITE`	`WRITE`	✓ 一致	SKILL.md declares report generation (HTML, Excel output)
网络访问	`READ`	`READ`	✓ 一致	tool_setup.md:55 documents REF_PATH for EBI CRAM reference fetching
命令执行	`WRITE`	`WRITE`	✓ 一致	tool_setup.md documents samtools/bcftools compilation for CRAM/BAM analysis
环境变量	`NONE`	`NONE`	—	No environment variable access found
技能调用	`NONE`	`NONE`	—	No skill invocation found
剪贴板	`NONE`	`NONE`	—	No clipboard access found
浏览器	`NONE`	`NONE`	—	No browser access found
数据库	`NONE`	`NONE`	—	No database access found

1 项发现

🔗

中危外部 URL 外部 URL

http://www.ebi.ac.uk/ena/cram/md5/%s

references/tool_setup.md:55

目录结构

11 文件 · 126.9 KB · 2850 行

Markdown 7f · 2501L Python 1f · 243L Text 2f · 83L JSON 1f · 23L

├─ ▾ 📁 evals

│ ├─ ▾ 📁 test_data

│ │ ├─ 📄 mock_23andme.txt Text 23L · 649 B

│ │ └─ 📄 mock_wegene.txt Text 60L · 1.4 KB

│ └─ 📋 evals.json JSON 23L · 1.6 KB

├─ ▾ 📁 references

│ ├─ 📝 snp_database.md Markdown 1041L · 49.6 KB

│ ├─ 📝 supplement_guide.md Markdown 754L · 37.8 KB

│ ├─ 📝 supported_formats.md Markdown 190L · 5.6 KB

│ └─ 📝 tool_setup.md Markdown 62L · 1.9 KB

├─ ▾ 📁 scripts

│ └─ 🐍 parse_genotypes.py Python 243L · 8.4 KB

├─ 📝 README_EN.md Markdown 116L · 5.1 KB

├─ 📝 README.md Markdown 114L · 4.9 KB

└─ 📝 SKILL.md Markdown 224L · 9.9 KB

包名	版本	来源	已知漏洞	备注
`openpyxl`	`unpinned`	pip	否	Used for Excel report generation; version not pinned but package is well-maintained

✓ Uses only Python standard library (gzip, os, sys, collections) - no external dependencies with known vulnerabilities

✓ All file operations are explicitly declared in SKILL.md (read genetic data, write reports)

✓ Network access is limited to legitimate EBI reference genome fetching for CRAM files

✓ No credential harvesting, API key theft, or sensitive path access

✓ No obfuscation techniques (base64, eval, atob) detected

✓ No data exfiltration or C2 communication patterns

✓ No reverse shell or remote code execution vectors

✓ Comprehensive SNP database with PMID citations - validates evidence-based approach

✓ Medical disclaimer explicitly required in generated reports

✓ Openpyxl dependency for Excel output is declared in tool_setup.md