alterlab-zinc-db
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to
cartblanche22.docking.organdfiles.docking.orgto retrieve chemical compound data and 3D structures. These are official domains for the ZINC database, a well-known academic resource maintained by the University of California, San Francisco (UCSF). - [COMMAND_EXECUTION]: The skill utilizes a bundled Python script
scripts/query_zinc.pyto handle API interactions. The script uses only standard Python libraries (urllib) to perform form-encoded POST requests and does not contain any risky execution patterns. - [INDIRECT_PROMPT_INJECTION]: The skill processes data (SMILES strings, molecular properties, and ZINC IDs) fetched from an external API. While this technically constitutes an indirect prompt injection surface should the external source be compromised, the risk is negligible given the structured nature of the data and the scientific context.
- Ingestion points: API responses processed in
scripts/query_zinc.pyand documentation examples usingpandasto read TSV files. - Boundary markers: None explicitly defined for chemical strings, but data is typically parsed into structured JSON/DataFrames.
- Capability inventory: Limited to network retrieval and local script execution for data processing.
- Sanitization: Standard URL encoding is used for outbound API parameters.
Audit Metadata