alterlab-deepchem
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external chemical and biological data files, which creates a surface for indirect prompt injection. Maliciously crafted data could potentially influence the agent's logic when it processes or reports on the file contents. \n
- Ingestion points: The skill uses
dc.data.CSVLoader,dc.data.SDFLoader, anddc.data.FASTALoaderinSKILL.mdand across scripts in thescripts/directory to load external molecular datasets. \n - Boundary markers: No specific delimiters or instructions to ignore embedded instructions are implemented in the data loading workflows. \n
- Capability inventory: The skill is configured with
Bash(python:*),Bash(uv:*), and file systemRead,Write, andEdittools in theSKILL.mdfrontmatter. \n - Sanitization: Input data is processed for featurization without explicit sanitization of text fields that might be reflected in agent outputs or logs. \n- [EXTERNAL_DOWNLOADS]: The skill downloads standardized benchmark datasets and pre-trained models from established repositories. \n
- Evidence:
scripts/transfer_learning.pyandreferences/workflows.mddocument fetching models from Hugging Face (e.g.,seyonec/PubChem10M_SMILES_BPE_60kandRostlab/prot_bert) and datasets from MoleculeNet. These are recognized as well-known services and trusted academic resources.
Audit Metadata