esm
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes the
picklemodule for local caching and checkpointing of protein embeddings and generation results. Thepickle.load()function is implemented inreferences/esm-c-api.md(within theEmbeddingCacheclass) andreferences/forge-api.md(within theCheckpointedBatchProcessorandForgeCacheclasses) to deserialize data from local files such asembeddings_cache.pklandcheckpoint.pkl. This practice involves unsafe deserialization of local data which could potentially lead to code execution if the cache files are compromised. - [INDIRECT_PROMPT_INJECTION]: The skill ingests protein sequences and structure files, which represents an attack surface for indirect prompt injection.
- Ingestion points: Data enters the system via
ESMProteininitialization with raw sequences and loading PDB files usingESMProtein.from_pdb(), as shown inreferences/esm3-api.mdandreferences/workflows.md. - Boundary markers: The instructions do not define delimiters or include specific instructions to the model to delineate or ignore potential injection patterns within the biological data inputs.
- Capability inventory: The skill's capabilities include file system write operations (PDB, FASTA, PNG), network operations via the Forge API, and execution of shell commands for library installation.
- Sanitization: There is no logic provided to sanitize or validate the content of protein sequences or the structure of PDB files before they are processed by the models.
- [EXTERNAL_DOWNLOADS]: The skill connects to EvolutionaryScale's Forge API at
https://forge.evolutionaryscale.aifor inference tasks and retrieves model weights from HuggingFace. These external references are appropriate for the skill's stated purpose of working with ESM models. - [COMMAND_EXECUTION]: The
SKILL.mddocument includes commands to install theesmandflash-attnPython libraries usinguv pip install, which are standard installation procedures for the toolkit.
Audit Metadata