d-molecule-ray-tracer

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/main.py

The code is a rendering-script generator, not apparent malware. Its primary security concern is unsafe interpolation of untrusted command-line values into scripts that may later be executed by PyMOL or ChimeraX, creating a potential downstream command-injection risk. The arbitrary output path is also potentially dangerous in a privileged or service context. As provided, multiple syntax errors prevent execution. The assessment is limited to this fragment.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:46 PM
Package URL
pkg:socket/skills-sh/aipoch%2Fmedical-research-skills%2Fd-molecule-ray-tracer%2F@458564c680d6c3700a393d75e54515165cb991a9dc2057d306c8ac6ee13452b0