rdkit

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEDYNAMIC_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The documentation in SKILL.md includes a code example suggesting the use of pickle.load() to deserialize molecular data from a file for performance optimization. The pickle module in Python is inherently insecure as it can execute arbitrary code during the unpickling process. If a user follows this advice and loads a maliciously crafted pickle file, it could lead to system compromise. It is recommended to use safer data formats such as JSON or RDKit's native binary format for data storage.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 12:15 PM