rdkit
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The documentation in
SKILL.mdincludes a code example suggesting the use ofpickle.load()to deserialize molecular data from a file for performance optimization. Thepicklemodule in Python is inherently insecure as it can execute arbitrary code during the unpickling process. If a user follows this advice and loads a maliciously crafted pickle file, it could lead to system compromise. It is recommended to use safer data formats such as JSON or RDKit's native binary format for data storage.
Audit Metadata