{"id":"cmuxirtac0yd9ad07dn1abkwm","slug":"pathogen-variant-surveillance","publicId":"c1c7eb6a-ab4c-4eee-a2a4-eeecec4264f4","name":"pathogen-variant-surveillance","description":"Queries public GenSpectrum LAPIS data for pathogen genomic surveillance, current lineage nomenclature, weekly sequence proportions, reporting delays, and descriptive mutation frequencies. Use for variant surveillance, Pango lineage validation, dominant submitted lineages, Nextclade assignment provenance, SARS-CoV-2, influenza/H5N1 clades, RSV, mpox, measles, dengue, or LAPIS queries. Distinguishes sequence prevalence from infection prevalence, clades from genotypes, missing calls from reference matches, and sampling changes from biological growth advantage.","version":"1.3","author":"k-dense-ai","license":"MIT","compatibility":"Requires Python 3.11+. Scripts use only the standard library. Needs network access to public LAPIS deployments on lapis.cov-spectrum.org, lapis.genspectrum.org, lapis.pathoplexus.org and raw.githubusercontent.com for pango-designation. No credentials for these public queries.","status":"completed","overallGrade":"C","scannerVersion":11,"fileCount":9,"hasSkillMd":true,"hasScripts":true,"hasReferences":true,"hasEvals":false,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/k-dense-ai/scientific-agent-skills/tree/main/skills/pathogen-variant-surveillance","createdAt":"2026-10-07T02:59:54.658Z","completedAt":"2026-10-07T02:59:54.654Z","visibility":"public","publishedAt":"2026-09-10T21:05:37.713Z","category":"","frameworks":[],"badgeStatus":"conditional","downloadCount":0,"verdictRationale":{"summary":"Skill has warnings: 1 warning in security or structure checks.","verdict":"warn","scanners":[{"source":"vettd","weight":1,"verdict":"warn"},{"source":"cisco","weight":0.8,"verdict":"pass"}],"consensus":"warn","warnTriggers":["References external URL — review for indirect prompt injection risk"],"policyVersion":"consensus-v1","hardFailTriggers":[]},"verdictPolicyVersion":"consensus-v1","skillId":"cmtw0o1ujbalaad07onv7izh6","findings":[{"id":"cmuxirtac0ydcad073y11hp2y","source":"cisco","category":"security","label":"Code makes network requests","detail":"SKILL.md — Skill code makes network requests. While not controlled by allowed-tools, network access should be documented and justified in the skill description.","severity":"medium","ruleId":"VTD-0087","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bbe419cfb0687c04e7f13893e88c32c2","filepath":"SKILL.md"},{"id":"cmuxirtac0ydead07xcxvkap3","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/lapis_client.py:173 — Pattern detected: urllib.request.Request(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"8823d25c5a5855b3596f1099e6287e05","filepath":"scripts/lapis_client.py"},{"id":"cmuxirtac0ydfad07i4qbz0h2","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/lapis_client.py:178 — Pattern detected: urllib.request.urlopen(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"8823d25c5a5855b3596f1099e6287e05","filepath":"scripts/lapis_client.py"},{"id":"cmuxirtac0ydgad07p7opppiw","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/lapis_client.py:313 — Pattern detected: urllib.request.Request(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"8823d25c5a5855b3596f1099e6287e05","filepath":"scripts/lapis_client.py"},{"id":"cmuxirtac0ydhad07g0eqn8a2","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/lapis_client.py:315 — Pattern detected: urllib.request.urlopen(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"8823d25c5a5855b3596f1099e6287e05","filepath":"scripts/lapis_client.py"},{"id":"cmuxirtac0ydbad07aaoczfyt","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"42638a8b7e9fc5df27449992eaebc724","filepath":"SKILL.md"},{"id":"cmuxirtac0yddad079ehul1yt","source":"cisco","category":"security","label":"Code uses search/grep patterns but Grep tool not in allowed-tools","detail":"SKILL.md — Skill restricts tools to ['Read', 'Write', 'Edit', 'Bash'] but code uses regex search patterns","severity":"low","ruleId":"VTD-0087","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bbe419cfb0687c04e7f13893e88c32c2","filepath":"SKILL.md"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"C","findingCount":6,"criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"B","findingCount":1,"criticalCount":0,"highCount":0}],"user":{"name":"Kris Mondlane","image":"https://avatars.githubusercontent.com/u/237055?v=4"},"repository":{"owner":"k-dense-ai","name":"scientific-agent-skills"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T14:09:51.195Z","lastVerifiedAt":"2026-10-22T14:09:51.195Z","lastChangeDetectedAt":"2026-10-06T21:35:15.519Z","scannedHash":"eb4c338e7edffe55fac07932f42bb517de7cd8bf","latestUpstreamHash":"eb4c338e7edffe55fac07932f42bb517de7cd8bf","nextCheckDueAt":"2026-10-23T13:33:27.355Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":2252,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmuxirtr70yh5ad07m98zy3rz","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":2252,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null},{"origin":"signal","id":"cmuxirybp0yyxad070npcvtmh","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmuxirtug0yiaad074qi98h0d","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"Requires Python 3.11+. Scripts use only the standard library. Needs network access to public LAPIS deployments on lapis.cov-spectrum.org, lapis.genspectrum.org, lapis.pathoplexus.org and raw.githubusercontent.com for pango-designation. No credentials for these public queries.","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null},{"origin":"signal","id":"cmuxirugd0ymmad07wp3d736k","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"declared_tool","relatedId":"Edit","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Edit","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null},{"origin":"signal","id":"cmuxirurm0yoqad07os77rxo6","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"declared_tool","relatedId":"Write","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Write","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null},{"origin":"signal","id":"cmuxirvdr0yruad07mfh2fjrl","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"pathogen-variant-surveillance","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null},{"origin":"signal","id":"cmuxiruac0ylkad07fq9atyxe","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"declared_tool","relatedId":"Bash","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Bash","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null},{"origin":"signal","id":"cmuxirujc0yndad077kc0o82v","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"declared_tool","relatedId":"Read","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Read","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null},{"origin":"signal","id":"cmuxiryl70yziad07jfm6qv43","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/cli-help","severity":null,"label":"CLI help","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null},{"origin":"signal","id":"cmuxiryx90z02ad07h6imaogk","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/structured-output","severity":null,"label":"Structured output","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null},{"origin":"signal","id":"cmuxirzws0z0oad07qqg9hnes","subjectType":"skill_audit","subjectId":"cmuxirtac0yd9ad07dn1abkwm","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/unpinned-dependencies","severity":"low","label":"Unpinned dependency versions","detail":"Pin dependency versions for reproducibility (e.g., >=4.12,<5 instead of >=4.12)","valueNum":null,"valueText":null,"unit":null,"method":null,"derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:50.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":37,"publisherSupplied":["name","description","author","version","license"]}