alterlab-chai
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes biomolecular sequences in FASTA format, which represents an ingestion surface for untrusted data that could potentially harbor malicious instructions in record headers.
- Ingestion points: Single typed FASTA files containing protein, ligand, RNA, or DNA records as described in
SKILL.md. - Boundary markers: None specified to differentiate data from instructions within the processed FASTA records.
- Capability inventory: The skill utilizes
Bash(python:*),Bash(uv:*),Read, andWritetools to execute folding models and manage files. - Sanitization: There is no mention of sanitizing or validating FASTA headers before they are processed by the underlying tools.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external model weights and software packages required for Chai-1.
- Evidence:
SKILL.mdandreferences/chai_usage.mdspecify that thechai_labpackage is installed viauvand several gigabytes of model weights are downloaded from the official repository and cached locally on the first execution. - [COMMAND_EXECUTION]: The skill uses shell commands to invoke the prediction model and manage the environment.
- Evidence: The
SKILL.mdfrontmatter allowsBashaccess, and the instructions describe usinguv run pythonand thechai-lab foldCLI for performing complex predictions.
Audit Metadata