pymatgen
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDATA_EXFILTRATIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates materials science workflows using the pymatgen library and mp-api. The execution flow is transparent and aligns with the stated purpose of analyzing crystal structures and thermodynamic properties.
- [DATA_EXFILTRATION]: Credential handling for the Materials Project API key is implemented using environment variables (MP_API_KEY). No hardcoded secrets or unauthorized network transmissions of sensitive local data were identified during the analysis.
- [REMOTE_CODE_EXECUTION]: There are no occurrences of piped shell execution, dynamic command generation from remote sources, or unsafe package installations. Dependencies like pymatgen and mp-api are standard industry libraries.
- [INDIRECT_PROMPT_INJECTION]: The skill provides functions to parse external structure files including CIF, POSCAR, and XYZ formats. Although this represents an ingestion point for external data, the risk of indirect injection is minimal as these are processed through structured scientific parsers rather than natural language interpretation.
Audit Metadata