deepchem
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill implements standard molecular machine learning workflows using the legitimate DeepChem library. No malicious intent, obfuscation, or unauthorized data access was detected. Findings related to data ingestion and external downloads are consistent with the skill's primary purpose and use trusted sources.
- [EXTERNAL_DOWNLOADS]: The skill downloads benchmark datasets and pretrained models from well-known and reputable sources.
- Evidence:
dc.molnet.load_*functions inscripts/graph_neural_network.pyandscripts/predict_solubility.pyfetch datasets from the official DeepChem MoleculeNet repository. - Evidence:
dc.models.HuggingFaceModelinscripts/transfer_learning.pyandreferences/workflows.mddownloads models from Hugging Face, such asseyonec/ChemBERTa-zinc-base-v1andRostlab/prot_bert. - [INDIRECT_PROMPT_INJECTION]: The skill provides the ability to ingest and process chemical data from external files, which is a common pattern in scientific AI agents.
- Ingestion points:
CSVLoader,SDFLoader, andFASTALoader(located inSKILL.mdandscripts/) allow reading SMILES, structural, and sequence data. - Boundary markers: Not present, but the data is processed into numerical tensors rather than interpreted as natural language instructions.
- Capability inventory: The skill can read local files and perform intensive mathematical computations (training/inference), but lacks direct shell command injection capabilities.
- Sanitization: Data is validated and featurized using DeepChem's built-in chemical validators and featurizers.
- [DYNAMIC_EXECUTION]: The skill uses dynamic function calls to handle different datasets.
- Evidence:
getattr(dc.molnet, f'load_{dataset_name}')inscripts/graph_neural_network.pydynamically loads the requested MoleculeNet benchmark. This is safe as the input is validated against a whitelist of supported datasets defined in the script's argument parser.
Audit Metadata