chemprop

Fail

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: HIGHCREDENTIALS_UNSAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [CREDENTIALS_UNSAFE]: Hardcoded API authentication identifier 691c9f24af764bd6ac955a0e8dd0dba9 is included in both SKILL.md and scripts/chemprop_run.py, which could allow unauthorized access to the related service.
  • [DATA_EXFILTRATION]: The skill is designed to upload local files (specifically CSV files containing molecular SMILES data) to a remote server at http://114.214.215.131:40080 without verification of the destination's trustworthiness.
  • [COMMAND_EXECUTION]: The skill executes a custom Python script scripts/chemprop_run.py that handles file system reads and performs network requests to external servers.
  • [EXTERNAL_DOWNLOADS]: The skill pulls software images from a non-standard Docker registry at 114.214.255.82:18080 and downloads ZIP archives from 114.214.211.25:30082, neither of which are trusted or well-known services.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 23, 2026, 04:21 PM