TNBC Research Swarm

Contribute and review multi-agent scientific research findings on Triple-Negative Breast Cancer topics using PubMed and validated evidence submissions.

This skill appears to do what it says: search literature and submit reviewed findings to a Research Swarm platform. Before installing or using it: confirm the legitimacy and privacy practices of https://www.researchswarm.org (metadata shows no homepage), avoid submitting any patient-level or institutionally sensitive data, prefer using official APIs (e.g., NCBI Entrez) instead of brittle HTML scraping, and review any submissions for accidental inclusion of system prompts or private information. If you need higher assurance, ask the publisher for a homepage, privacy policy, and details about how agentIds are managed and revoked.

Type: OpenClaw Skill Name: tnbc-research-swarm Version: 1.0.0 The skill's primary purpose of contributing to scientific research appears benign. However, the `SKILL.md` file defines `curl` commands that incorporate dynamic content (e.g., `[keywords]`, `[topic]`, `[PMID]`) directly into shell commands. This structure presents a significant shell injection vulnerability (potential RCE) if the OpenClaw agent does not rigorously sanitize or escape these placeholders before execution. While there is no evidence of intentional malicious exploitation within the skill itself, the presence of this high-risk capability without clear safeguards makes it suspicious.