Agent skill · Audited from source
setup-tooluniverse
skill · mims-harvard/tooluniverseApache-2.0 licenceAudited 28 Oct 2026 · source 43be0fac747b
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 43be0fac747b and observed network and shell access and no hard-coded secrets. The audit raised 9 findings, 0 critical or high. What it does: Install and configure ToolUniverse for any use case — MCP server (chat-based), CLI (command line with 14 subcommands), or Python SDK (Coding API with 3 calling patterns). Covers uv/uvx setup, MCP configuration for 12+…
Cite
Cite this page
ModelsAtlas. “setup-tooluniverse (mims-harvard/tooluniverse)”. Retrieved 28 Oct 2026. https://modelsatlas.com/skills/mims-harvard/setup-tooluniverse
Trust audit
Audit 0.4.1 · source read 28 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkDeclared1 observation
- ShellDeclared2 observations
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | WARN | 2 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 7 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (9)
MEDIUMCode injectioncode.dynamic_import · scripts/diagnose_setup.py:231
__import__(package)
- Why
- No further detail recorded for this rule.
- Fix
- —
MEDIUMCode injectioncode.dynamic_import · scripts/verify_installation.py:180
__import__(package)
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOPrompt injectionprompt.persistence · EXAMPLES.md:84
# Add to PATH in ~/.zshrc or ~/.bashrc
- Why
- instructs the agent to persist itself in the user's environment
- Fix
- —
INFOPrompt injectionprompt.persistence · EXAMPLES.md:447
# or add to PATH: export PATH="$HOME/.local/bin:$PATH"
- Why
- instructs the agent to persist itself in the user's environment
- Fix
- —
INFOSupply chainprompt.pipe_to_shell · EXAMPLES.md:232
curl -LsSf https://astral.sh/uv/install.sh | sh
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOSupply chainprompt.pipe_to_shell · INSTALL.md:24
curl -LsSf https://astral.sh/uv/install.sh | sh
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOSupply chainprompt.pipe_to_shell · MCP_CONFIG.md:380
- If uvx is missing, install uv: `curl -LsSf https://astral.sh/uv/install.sh | sh`
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOSupply chainprompt.pipe_to_shell · SKILL.md:51
curl -LsSf https://astral.sh/uv/install.sh | sh
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOSupply chainprompt.pipe_to_shell · TRAE.md:20
curl -LsSf https://astral.sh/uv/install.sh | sh
- Why
- No further detail recorded for this rule.
- Fix
- —
Audit 0.4.1 · source sha 43be0fac747b · 28 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publishermims-harvard GitHub organizationOwner of the repository this skill is read from
- Source foldermims-harvard/tooluniverse/skills/setup-tooluniverseThe exact folder we audited
- LicenceApache-2.0As the repository states it
- Commit pinned for this verdict43be0fac747bA new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Install and configure ToolUniverse for any use case — MCP server (chat-based), CLI (command line with 14 subcommands), or Python SDK (Coding API with 3 calling patterns). Covers uv/uvx setup, MCP configuration for 12+…
---
name: setup-tooluniverse
description: Install and configure ToolUniverse for any use case — MCP server (chat-based), CLI (command line with 14 subcommands), or Python SDK (Coding API with 3 calling patterns). Covers uv/uvx setup, MCP configuration for 12+ AI clients (Cursor, Claude Desktop, Windsurf, VS Code, Codex, Gemini CLI, Trae, Cline, etc.), full CLI reference (tu list/grep/info/find/run/test/status/build/remote/doctor/serve/connect/connections/disconnect), Coding API quickstart, agentic tools, code executor, API key walkthrough, skill installation, and upgrading. Use when user asks how to set up ToolUniverse, which access mode to use (MCP vs CLI vs SDK), configuring MCP servers, using the CLI, troubleshooting installation, upgrading, or mentions installing ToolUniverse or setting up scientific tools. Also triggers for "how do I use ToolUniverse", "what's the best way to access tools", "command line", "tu command", "coding API", "tu build".
---
# Setup ToolUniverse
Guide the user step-by-step through setting up ToolUniverse.
## Agent Behavior
- **Detect language** from user's first message. Respond in their language; keep commands/URLs in English.
- Go **one step at a time**. Ask before proceeding.
- Use **AskQuestion** for structured choices.
- **Explain briefly** in plain language. Celebrate small wins.
- When something goes wrong, help troubleshoot before moving on.
## Internal Notes (do not show)
ToolUniverse has 2,700+ tools. The `tooluniverse` command enables compact mode automatically, exposing only 5 core MCP tools (list_tools, grep_tools, get_tool_info, execute_tool, find_tools) while keeping all tools accessible via execute_tool.
## What is ToolUniverse?
**Always explain first, in plain language:**
ToolUniverse is free, open-source software connecting to 2,000+ scientific databases (PubMed, UniProt, ChEMBL, FAERS, ClinicalTrials.gov, etc.). Instead of visiting each website, you search from one place. Think of it like a universal remote for scientific databases.
**Why AI assistants?** The AI reads your question, figures out which databases to search, runs queries, and summarizes results. You just ask your question.
## Step 1: Choose How to Use It
Present using AskQuestion:
| Mode | What it means | Who it's for |
|------|---------------|-------------|
| **Chat mode** | Ask questions to an AI assistant. No coding. | Most researchers. |
| **Command line** | Type short commands in Terminal. | Quick tests. Terminal-comfortable users. |
| **Python code** | Write scripts for automated pipelines. | Programmers. |
Options: "I want to ask questions" → Chat mode | "Quick try" → CLI | "I write Python" → SDK | "I don't know" → Recommend Chat mode
**If Chat mode**, ask which app (AskQuestion): Cursor, Claude Desktop, VS Code/Copilot, Windsurf, Claude Code, Gemini CLI, Codex, Cline/Trae/Antigravity/OpenCode. "I don't have any" → Recommend [Claude Desktop](https://claude.ai/download).
## Step 2: Install uv
Only prerequisite: `uv` (manages everything else automatically).
**Terminal help** (if needed): Mac: Cmd+Space → "Terminal" → Enter. Windows: Win key → "PowerShell" → Enter.
```bash
curl -LsSf https://astral.sh/uv/install.sh | sh
```
(This is a safe, standard command that downloads and installs `uv`, a small package manager. It's widely used by Python developers. Close and reopen your terminal after it finishes.)
Verify: `uv --version`
## CLI Setup
Make sure Step 2 is done, then try:
```bash
uvx --from tooluniverse tu status # How many tools?
uvx --from tooluniverse tu find 'drug safety' # Search by topic
uvx --from tooluniverse tu info FAERS_count_death_related_by_drug # See params
uvx --from tooluniverse tu run FAERS_count_death_related_by_drug '{"medicinalproduct": "metformin"}'
```
First run takes ~30s (downloads package), then instant. **Shortcut**: `uv tool install tooluniverse` → then just use `tu` directly.
### All CLI subcommands
| Command | What it does | Example |
|---------|-------------|---------|
| `tu status` | Show tool count and top categories | `tu status` |
| `tu list` | List tools (modes: names, categories, basic, by_category, summary, custom) | `tu list --mode basic --limit 20` |
| `tu find` | Search by natural language (keyword scoring, no API key needed) | `tu find 'protein structure analysis'` |
| `tu grep` | Text/regex pattern search | `tu grep '^UniProt' --mode regex` |
| `tu info` | Show tool parameters and schema | `tu info PubMed_search_articles` |
| `tu run` | Execute a tool | `tu run PubMed_search_articles '{"query": "CRISPR"}'` |
| `tu test` | Test a tool with its example inputs | `tu test UniProt_get_entry_by_accession` |
| `tu build` | Generate typed Python wrappers for Coding API (also regenerates the internal lazy-load registry in place — unaffected by `--output`) | `tu build --output ./my_tools` |
| `tu serve` | Start MCP stdio server (same as `uvx tooluniverse`) | `tu serve` |
**Output flags** (most commands except `build`/`serve`): `--json` (pretty) or `--raw` (compact, pipe-friendly).
Continue to **Step 3** (API Keys).
## SDK Setup
> **Install `uv` first (Step 2). Do not use system `pip`.** On a current Mac
> (Homebrew Python 3.13/3.14) `pip install tooluniverse` stops with
> `error: externally-managed-environment` (PEP 668), and `python3 -m venv` can
> fail at `ensurepip`. `uv` avoids both because it downloads and manages its own
> Python.
```bash
uv venv --python 3.12 # own Python + virtualenv, ignores system pip
source .venv/bin/activate # Windows: .venv\Scripts\activate
uv pip install tooluniverse
```
`uv pip install` needs an active virtualenv — run `uv venv` first, or use
`uv tool install tooluniverse` if you only want the `tu` command.
For detailed patterns, invoke the `tooluniverse-sdk` skill.
**Optional extras**: the base install covers API/database tools. Local ML,
cheminformatics, and plotting tools need extras — `uv pip install
'tooluniverse[ml]'`, `[visualization]`, `[Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 43be0fa
npx skills add mims-harvard/ToolUniverse --all git clone --depth 1 --filter=blob:none --sparse https://github.com/mims-harvard/ToolUniverse.git /tmp/tu-skills pip install tooluniverse git clone https://github.com/mims-harvard/ToolUniverse.git pip install -e . uv pip install tooluniverse
git clone https://github.com/mims-harvard/tooluniverse git -C tooluniverse checkout 43be0fac747b
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 43be0fac747b only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Claude Desktop | Mentioned in its text, not tested | Skills for Claude Desktop · About Claude Desktop |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
| GitHub Copilot | Mentioned in its text, not tested | Skills for GitHub Copilot · About GitHub Copilot |
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
| Gemini CLI | Mentioned in its text, not tested | Skills for Gemini CLI · About Gemini CLI |
| Windsurf | Mentioned in its text, not tested | Skills for Windsurf · About Windsurf |
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
43be0fac747b
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/mims-harvard/setup-tooluniverse/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
mims-harvard/tooluniverse
Therapeutic antibody engineering and optimization, lead-to-clinical-candidate. Covers sequence humanization (germline alignment, framework retention), affinity maturation, developability (aggregation, stability, PTMs),…
mims-harvard/tooluniverse
Discover novel small-molecule binders for protein targets using structure-based and ligand-based screening. Covers druggability assessment, known-ligand mining (ChEMBL, BindingDB), similarity expansion, ADMET filtering,…
mims-harvard/tooluniverse
Detect and analyze adverse drug event signals using FDA FAERS reports, drug labels, and disproportionality statistics (PRR, ROR, IC). Generates quantitative safety signal scores (0-100) with evidence grading. Use for…
mims-harvard/tooluniverse
ToolUniverse plugin router. STEP 1 BEFORE ANY ANALYSIS: if the data folder contains `*_executed.ipynb`, run `tu run read_executed_notebook '{"data_folder":"<path>","search":"<keyword>"}'` to extract its cell outputs and…
mims-harvard/tooluniverse
Create high-quality ToolUniverse skills following test-driven, implementation-agnostic methodology.
ruvnet/claude-flow
Quantum-resistant, self-learning version control for AI agents with ReasoningBank intelligence and multi-agent coordination
Add this badge to your README
[](https://modelsatlas.com/skills/mims-harvard/setup-tooluniverse/)
<a href="https://modelsatlas.com/skills/mims-harvard/setup-tooluniverse/"><img src="https://modelsatlas.com/skills/mims-harvard/setup-tooluniverse/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about setup-tooluniverse
What does the setup-tooluniverse skill do?
Is setup-tooluniverse safe to install?
What can setup-tooluniverse access on my machine?
What do I need installed to use setup-tooluniverse?
Which assistants does setup-tooluniverse work with?
How current is this page?
Sources
- github.com/mims-harvard/tooluniverse/tree/main/skills/setup-tool — the audited source at commit 43be0fac747b and every finding aboveObserved · 28 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the setup-tooluniverse skill do?
- Is setup-tooluniverse safe to install?
- What can setup-tooluniverse access on my machine?