Skip to content
Back to skills

Clawbio

ASecurity

"Use ClawBio for local-first bioinformatics agent workflows:

  • 247 stars
  • 0 votes
  • 0 copies
  • 4 views
  • Added September 8, 2026
devopspythongobashapibackendsecurity

Works with

  • cli
  • api
  • mcp

Security analysis

A96/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 20 files and shows the line behind each finding

Scanned September 8, 2026

npx -y skills add VectorSpaceLab/AREX-Skill --skill clawbio --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Clawbio?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Clawbio
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/vectorspacelab-clawbio/badge)](https://www.skillsdirectory.com/skills/vectorspacelab-clawbio)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: clawbio
description: "Use ClawBio for local-first bioinformatics agent workflows:
  install and run its skill library, route genomic or omics inputs, create
  reproducible reports, connect optional MCP or Nextflow integrations, and
  author or validate skills."
disable-model-invocation: true
metadata:
  disco-role: operating
license: NOASSERTION
---

# ClawBio

ClawBio is a Python package and skill library for reproducible, local-first
bioinformatics workflows. Use this repo skill to operate the platform and
choose its specialist skills; do not improvise scientific thresholds or treat
an output as a clinical diagnosis.

## Start here

- For install, `clawbio list/run/upload`, Python APIs, profiles, outputs, or
  replay metadata, read [core-runner](sub-skills/core-runner/SKILL.md).
- For a natural-language biological request, an input file, or a multi-step
  chain, read [domain-routing](sub-skills/domain-routing/SKILL.md) before
  choosing an alias.
- For MCP, messaging/web adapters, provider credentials, or nf-core/Nextflow,
  read [pipelines-integrations](sub-skills/pipelines-integrations/SKILL.md).
- For creating or changing a skill, catalog registration, tests, demos, or
  `INTENTS.json`, read [skill-authoring](sub-skills/skill-authoring/SKILL.md).
- For replay/checksum review, benchmark status, action contracts, privacy, or
  security filtering, read [validation-safety](sub-skills/validation-safety/SKILL.md).
- Read [troubleshooting](references/troubleshooting.md) when the failure spans
  more than one route. Use [provenance](references/repo-provenance.md) before
  deciding whether this graph is stale for a repository checkout. For a
  read-only package/API/CLI probe, run [check_environment.py](scripts/check_environment.py)
  after reading its help.

## Public setup

For ordinary users, install the public distribution with Python 3.11 or newer:

```bash
python -m pip install clawbio
python -c "import clawbio; print(clawbio.__version__)"
clawbio list
```

The optional MCP extra is `clawbio[mcp]`. It is deliberately separate from the
base install. A source checkout may use the repository's documented `uv sync`
workflow, but a published skill must not assume that checkout exists.

## Platform operating rules

1. Identify the goal, input format/build, desired artifact, and whether the
   request is demo, local-file, or profile based. Inspect small headers locally;
   do not upload raw genomic data just to determine its type.
2. Route to the narrowest catalog entry. Catalog metadata distinguishes the
   registered CLI aliases from agent-readable-only `SKILL.md` contracts; do not
   invent a runnable alias for a spec-only skill.
3. Execute registered skills through `clawbio run` or the stable Python runner,
   not by bypassing the runner's per-skill flag allowlist. Use a fresh writable
   output directory and inspect structured results as well as exit codes.
4. Preserve the local-first boundary. External APIs, cloud datasets, MCP local
   file access, bots, credentials, containers, Nextflow, and large references
   are explicit opt-ins with separate failure and provenance handling.
5. Keep `PASS`, `SKIP`, `FAIL`, stale/expired action, and unavailable-backend
   states distinct. A successful import or demo does not prove a scientific
   method, external service, GPU, or clinical interpretation.
6. Reports must retain the package's research/education disclaimer. Do not give
   medical diagnoses or treatment advice from a ClawBio result.

## Common entry points

```bash
clawbio list
clawbio run <registered-alias> --demo
clawbio run <registered-alias> --input sample.ext --output results
clawbio upload --input genotype.txt --patient-id PT001
clawbio run profile --profile profiles/PT001.json --output profile-results
clawbio mcp
```

The exact flags and virtual `full-profile` behavior belong to
[core-runner](sub-skills/core-runner/SKILL.md). Use [domain-routing](sub-skills/domain-routing/SKILL.md)
for aliases and chains, not this short list as a substitute for input
inspection.

## Freshness and scope

This graph is versioned against the source snapshot in
[repo-provenance.md](references/repo-provenance.md). If the package version,
public entry points, catalog, or major evidence paths changed, refresh the repo
skill before relying on detailed claims. Review-only test cases and reports are
kept outside this runtime directory; they are not inputs to ordinary ClawBio
runs.

Files in this skill

  • SKILL.md4.3 KB
  • references/repo-provenance.md1.6 KB
  • references/repo-routing-metadata.json513 B
  • references/troubleshooting.md3.4 KB
  • scripts/check_environment.py3.7 KB
  • sub-skills/core-runner/SKILL.md3.9 KB
  • sub-skills/core-runner/references/api-reference.md5.5 KB
  • sub-skills/core-runner/references/cli-reference.md5.5 KB
  • sub-skills/core-runner/references/output-and-reproducibility.md5.2 KB
  • sub-skills/core-runner/references/troubleshooting.md5.7 KB
  • sub-skills/core-runner/scripts/check_output_contract.py6.4 KB
  • sub-skills/domain-routing/SKILL.md5.9 KB
  • sub-skills/domain-routing/references/catalog-and-routing.md7.1 KB
  • sub-skills/domain-routing/references/domain-families.md8.7 KB
  • sub-skills/domain-routing/references/troubleshooting.md5.3 KB
  • sub-skills/domain-routing/scripts/catalog_query.py8.2 KB
  • sub-skills/pipelines-integrations/SKILL.md4.9 KB
  • sub-skills/pipelines-integrations/references/integrations.md7.9 KB
  • sub-skills/pipelines-integrations/references/pipeline-preflight.md9.1 KB
  • sub-skills/pipelines-integrations/references/troubleshooting.md8.4 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.