Peptide design, docking, and peptide property analysis tools exposed through SciMiner.
Security Analysis
high confidenceThe skill's requests, instructions, and included code align with its stated purpose of calling SciMiner's APIs using a single SCIMINER_API_KEY; there are no unrelated credentials, installers, or hidden endpoints.
Name/description, required env var (SCIMINER_API_KEY), SKILL.md instructions, and the included registry code all target SciMiner APIs and peptide-design tools. Nothing in the manifest asks for unrelated cloud creds, system binaries, or config paths.
Runtime instructions explicitly call SciMiner API endpoints (invoke, file upload, result polling) and require uploading PDB/structure files when applicable. The skill does not instruct the agent to read unrelated local files or other environment variables. It also instructs to stop if the API key is missing rather than falling back to other services.
No install spec is provided (instruction-only), and the two included code files are a small registry and package init. No remote downloads, installers, or archive extraction are present.
Only a single credential (SCIMINER_API_KEY) is required and is appropriate for an API-driven integration. There are no extra SECRET/TOKEN/PASSWORD env vars requested without justification.
always is false, user-invocable is true, and model invocation is allowed (normal). The skill does not request permanent system presence or attempt to modify other skills' configs.
Guidance
This skill will send uploaded files (PDBs, ligand files, sequences) and requests to sciminer.tech using your SCIMINER_API_KEY. Only install it if you trust SciMiner with any proprietary sequences or structure files you may submit. Treat the API key like a secret: restrict its permissions if possible, rotate it if compromised, and remove it from shared environments. If you need on-premises or privacy-preserving design, verify SciMiner's data retention/privacy policy before using the skill. Finally, the SKILL.md targets internal API paths (e.g., /v1/internal/...), which appears intentional for SciMiner but you may want to confirm with SciMiner support if you have concerns about endpoint stability or access scope.
Latest Release
v1.0.4
- Clarified that users should obtain a free SciMiner API key from https://sciminer.tech/utility. - Updated instructions and notices to emphasize "free" API key. - No functional or tooling changes—documentation adjustments only.
More by @xiongzhp
Published by @xiongzhp on ClawHub
