pymatgen

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests structural data from external files (CIF, POSCAR, vasprun.xml) for analysis and conversion.\n
  • Ingestion points: Files are read using Structure.from_file and Vasprun in scripts/structure_analyzer.py and scripts/structure_converter.py.\n
  • Boundary markers: There are no explicit boundary markers or instructions to disregard potential commands within structural metadata.\n
  • Capability inventory: The skill includes file writing (Structure.to), network access (MPRester), and shell-based script execution.\n
  • Sanitization: No sanitization is performed on the content of processed files before they are parsed and incorporated into the agent's context.\n- [DATA_EXFILTRATION]: The skill makes network requests to the Materials Project API to retrieve scientific data.\n
  • Network operations: The MPRester client connects to next-gen.materialsproject.org to fetch materials properties. This communication is essential for the functionality of the skill and targets a well-known service.\n- [EXTERNAL_DOWNLOADS]: The skill's documentation recommends installing pymatgen and mp-api from the standard Python Package Index (PyPI).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 09:24 PM