ase
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the ASE library from reputable sources including the official Python Package Index and a GitLab repository. Evidence includes installation commands such as pip install ase and git clone from the official ASE GitLab repository.
- [COMMAND_EXECUTION]: The skill provides access to command-line interface tools for viewing structures and converting files, which is consistent with the primary purpose of the library. Evidence includes commands like ase gui and ase convert used for structure visualization and format conversion.
- [INDIRECT_PROMPT_INJECTION]: The skill contains functions that read external files which could serve as a potential surface for indirect injection, although the target formats are highly structured scientific data. 1. Ingestion points: File reading capabilities via ase.io.read in SKILL.md. 2. Boundary markers: Not present. 3. Capability inventory: File system read/write access and integration with external simulation calculators. 4. Sanitization: Relies on ASE's built-in parsers for specific chemistry file formats.
Audit Metadata