pymatgen
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests structural data from external files (CIF, POSCAR, vasprun.xml) for analysis and conversion.\n
- Ingestion points: Files are read using
Structure.from_fileandVaspruninscripts/structure_analyzer.pyandscripts/structure_converter.py.\n - Boundary markers: There are no explicit boundary markers or instructions to disregard potential commands within structural metadata.\n
- Capability inventory: The skill includes file writing (
Structure.to), network access (MPRester), and shell-based script execution.\n - Sanitization: No sanitization is performed on the content of processed files before they are parsed and incorporated into the agent's context.\n- [DATA_EXFILTRATION]: The skill makes network requests to the Materials Project API to retrieve scientific data.\n
- Network operations: The
MPResterclient connects tonext-gen.materialsproject.orgto fetch materials properties. This communication is essential for the functionality of the skill and targets a well-known service.\n- [EXTERNAL_DOWNLOADS]: The skill's documentation recommends installingpymatgenandmp-apifrom the standard Python Package Index (PyPI).
Audit Metadata