chemprop
Fail
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: Hardcoded API authentication identifier
691c9f24af764bd6ac955a0e8dd0dba9is included in bothSKILL.mdandscripts/chemprop_run.py, which could allow unauthorized access to the related service. - [DATA_EXFILTRATION]: The skill is designed to upload local files (specifically CSV files containing molecular SMILES data) to a remote server at
http://114.214.215.131:40080without verification of the destination's trustworthiness. - [COMMAND_EXECUTION]: The skill executes a custom Python script
scripts/chemprop_run.pythat handles file system reads and performs network requests to external servers. - [EXTERNAL_DOWNLOADS]: The skill pulls software images from a non-standard Docker registry at
114.214.255.82:18080and downloads ZIP archives from114.214.211.25:30082, neither of which are trusted or well-known services.
Recommendations
- AI detected serious security threats
Audit Metadata