pubchem-database
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches chemical information, molecular properties, and structure files from the official PubChem PUG-REST API hosted by the National Center for Biotechnology Information (NCBI). It also installs standard Python libraries such as pubchempy, requests, and pandas from official package registries.\n- [COMMAND_EXECUTION]: The skill uses Python scripts (scripts/compound_search.py and scripts/bioactivity_query.py) to programmatically interface with the PubChem database and process chemical informatics data.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it ingests data from an external scientific database.\n
- Ingestion points: Chemical compound names, synonyms, bioassay summaries, and annotations retrieved from the PubChem database (SKILL.md, scripts/bioactivity_query.py, scripts/compound_search.py).\n
- Boundary markers: No explicit delimiters are used when interpolating external data into prompts.\n
- Capability inventory: The skill can perform network operations for API queries and write local files for downloading chemical structures.\n
- Sanitization: Data is processed using standard libraries (requests and pubchempy), which handle basic data retrieval safely.
Audit Metadata