diffdock
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes complex external data formats which can serve as a vector for indirect injection.
- Ingestion points: The skill ingests PDB files for proteins, SMILES strings or SDF/MOL2 files for ligands, and batch processing instructions via CSV files as documented in
SKILL.mdandreferences/workflows.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potential instructions embedded within the molecular data or CSV fields.
- Capability inventory: The skill environment executes shell commands via Python and allows for file modifications via instructions.
- Sanitization: The documentation does not describe any sanitization or validation performed on the structure files or CSV content before they are processed by the inference engine.
- [EXTERNAL_DOWNLOADS]: The skill retrieves necessary model components from external sources.
- Automatically downloads ESMFold model weights (
esm2_t33_650M_UR50D) from Torch Hub into the~/.cache/torch/hub/checkpointsdirectory during the first execution of sequence-only workflows. - [COMMAND_EXECUTION]: The skill involves the execution of shell commands to perform its tasks.
- Provides instructions for running docking tasks using
python3 -m inference. - Recommends using the
sedutility to modify constants within theinference.pysource code to adjust system resource limits for the sandbox.
Audit Metadata