skills/aipoch/open-science/esmfold2/Gen Agent Trust Hub

esmfold2

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches model code and dependencies from the official Biohub GitHub organization and Hugging Face repositories. This includes a specialized fork of the transformers library and the esm SDK required for model execution.
  • [COMMAND_EXECUTION]: Provides instructions for setting up a Python 3.12 environment using pip and uv to install necessary bioinformatics, machine learning, and hardware acceleration packages.
  • [DYNAMIC_EXECUTION]: Includes a Python implementation to monkeypatch torch.linalg.svd at runtime. This is designed to improve CUDA stability during diffusion sampling by redirecting specific operations to the CPU to avoid cusolver workspace corruption.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted biological data formats that act as potential attack surfaces.
  • Ingestion points: Processes protein sequences, Multiple Sequence Alignments (MSA) from A3M files, and SMILES strings via StructurePredictionInput and MSA utility classes.
  • Boundary markers: No specific delimiters or instructions are used to separate external sequence data from the agent's logic.
  • Capability inventory: The skill allows writing prediction files to the local file system, network access for fetching weights from Hugging Face, and execution of shell commands for installation.
  • Sanitization: No explicit validation or sanitization is applied to the input biological sequences or structural data files before they are processed by the folding model.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 12:56 PM