alterlab-biopython Rapport d’audit.

Avertissements

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The SKILL.md references Biopython 1.87 as the current version, which may become outdated; consider noting that version numbers change and recommend checking the official docs.
• The skill's allowed-tools include broad Bash(python:*) and Bash(uv:*), which is typical for coding skills but could be misused if the agent is compromised; however, this is a configuration concern, not a flaw in the skill itself.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• GitHub adoption: 66 GitHub stars
• Stars/forks activity: 66 stars, 13 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Méthode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.