d-molecule-ray-tracer
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a locally packaged Python script (
scripts/main.py) to generate rendering templates. The script performs deterministic text transformation based on user-supplied parameters like resolution, lighting presets, and molecular styles. - [EXTERNAL_DOWNLOADS]: The generated PyMOL scripts utilize the
fetchcommand to retrieve molecular data from the RCSB Protein Data Bank (rcsb.org). This is a well-known scientific service, and the operation is consistent with the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill provides an ingestion surface for untrusted data via the
--pdbparameter and file path inputs inscripts/main.py. Boundary markers are present inSKILL.mdthrough explicit output requirements and assumption-tracking instructions. The skill's capabilities are limited to writing generated templates to the local file system. Basic sanitization is implemented for PDB identifiers using an alphanumeric check (pdb.isalnum()).
Audit Metadata