chemistry-tools
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches chemical information from established, well-known scientific databases, including PubChem (National Center for Biotechnology Information) and ChEBI (EMBL-EBI). These are authoritative public resources for chemical data and are considered safe sources.
- [COMMAND_EXECUTION]: Uses
curlto interact with chemical database APIs. The instructions include piping output topython3 -m json.tool, which is a safe, built-in Python module used for formatting JSON data for readability; it does not execute the data as code. - [REMOTE_CODE_EXECUTION]: Automated scans flagged a piped command to Python. Upon review, the command uses the
-m json.toolflag, which invokes a standard formatting utility rather than executing remote code. The data source (NIH PubChem) is also a trusted government entity. - [DATA_EXFILTRATION]: No sensitive environment variables, credentials, or private file paths are accessed. The network operations are limited to outgoing requests for public chemical data.
Audit Metadata