zinc-database

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents and provides code examples for downloading chemical structure data from files.docking.org and querying the ZINC API at cartblanche22.docking.org. These are well-known academic resources maintained by the University of California, San Francisco (UCSF) for molecular docking and virtual screening.
  • [COMMAND_EXECUTION]: Python integration examples demonstrate the use of subprocess.run to call curl. While this executes shell commands, the commands are restricted to fetching data from the official database API using developer-defined parameters, which is a standard pattern for this use case.
  • [DATA_EXFILTRATION]: There is no evidence of unauthorized data access or exfiltration. Network operations are exclusively directed toward the ZINC database infrastructure to retrieve publicly available chemical information.
  • [PROMPT_INJECTION]: No prompt injection patterns, bypass instructions, or behavioral overrides were detected in the skill instructions or metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 03:10 AM