mol-image-to-smiles
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill utilizes well-known and reputable scientific libraries, including
DECIMERandhuggingface_hub, for image recognition tasks. Dependencies are clearly defined inrequirements.txtand are sourced from standard registries. - [SAFE]: Data handling is restricted to reading user-specified image files and writing results to a designated output directory. Network communication is limited to the HuggingFace Inference API, which is a well-known service, for performing model inference on the provided images.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes untrusted image data that could potentially contain adversarial textual instructions.
- Ingestion points: The
scripts/mol_image_to_smiles.pyscript accepts user-provided file paths via the-i/--inputcommand-line argument and reads the file content. - Boundary markers: No delimiters or explicit instructions to ignore embedded textual content are provided when the data is passed to the recognition models.
- Capability inventory: The skill has the capability to read local files, write JSON results to the file system, and perform network requests to HuggingFace.
- Sanitization: No sanitization, validation, or filtering of potential textual content within the input images is performed before processing.
Audit Metadata