geo-database
Audited by Socket on Mar 3, 2026
1 alert found:
MalwareThis skill/document is coherent and consistent with its stated purpose: programmatic access, download, and analysis of GEO datasets using Biopython (Entrez), GEOparse, FTP/wget, and standard Python analysis libraries. I found no evidence of credential harvesting, hidden backdoors, remote code execution from untrusted domains, or routing data to unknown third-party endpoints. The main security considerations are standard supply-chain risks from installing PyPI packages, the use of plaintext FTP examples (prefer HTTPS when available), and a promotional external link to K-Dense Web which is a referral but not a data sink in the examples. Documentation typos ('uv pip install') should be corrected. Overall the artifact appears benign for its intended data-retrieval and analysis role, with low-to-moderate supply-chain risk inherent to dependency installation and use of FTP.