deepchem
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches pretrained model weights and configurations from Hugging Face (e.g., ChemBERTa and MolFormer) as part of its transfer learning functionality. These are sourced from well-known repositories and are standard for molecular ML tasks.
- [COMMAND_EXECUTION]: The provided Python scripts perform model training and evaluation using the DeepChem API. All operations, including dataset loading and model fitting, are constrained to the intended scientific workflows.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill reads external data via
CSVLoader,SDFLoader,FASTALoader, andJsonLoader(SKILL.md, api_reference.md). - Boundary markers: Not explicitly defined for raw molecular data.
- Capability inventory: The skill performs model training and saves results but lacks dangerous capabilities like arbitrary shell execution or network exfiltration.
- Sanitization: Data is processed through established scientific parsers (RDKit/DeepChem) which are not susceptible to traditional instruction-based injection.
- [SAFE]: Extensive review found no evidence of obfuscated code, persistence mechanisms, or metadata poisoning. The skill's behavior aligns perfectly with its stated purpose of chemical property prediction.
Audit Metadata