Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• SKILL.md does not explicitly include a setup or installation step for the bioservices package; it assumes the dependency is already available.
• The documentation correctly warns about removed UniChem helper methods in bioservices 1.16.0, but the included scripts should be audited to ensure they do not still call deprecated methods like get_compound_id_from_kegg.
• No explicit input validation or data-handling guidance is given for untrusted compound names, identifiers, or web API responses, which is relevant for a network-connected bioinformatics skill.
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• SKILL.md does not explicitly include a setup or installation step for the bioservices package; it assumes the dependency is already available.
• The documentation correctly warns about removed UniChem helper methods in bioservices 1.16.0, but the included scripts should be audited to ensure they do not still call deprecated methods like get_compound_id_from_kegg.
• No explicit input validation or data-handling guidance is given for untrusted compound names, identifiers, or web API responses, which is relevant for a network-connected bioinformatics skill.
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• SKILL.md does not explicitly include a setup or installation step for the bioservices package; it assumes the dependency is already available.
• The documentation correctly warns about removed UniChem helper methods in bioservices 1.16.0, but the included scripts should be audited to ensure they do not still call deprecated methods like get_compound_id_from_kegg.
• No explicit input validation or data-handling guidance is given for untrusted compound names, identifiers, or web API responses, which is relevant for a network-connected bioinformatics skill.
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• SKILL.md does not explicitly include a setup or installation step for the bioservices package; it assumes the dependency is already available.
• The documentation correctly warns about removed UniChem helper methods in bioservices 1.16.0, but the included scripts should be audited to ensure they do not still call deprecated methods like get_compound_id_from_kegg.
• No explicit input validation or data-handling guidance is given for untrusted compound names, identifiers, or web API responses, which is relevant for a network-connected bioinformatics skill.
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.