rowan

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the official Rowan Python SDK (rowan) and references documentation from the Rowan GitHub repository.
  • [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: Ingests molecular structures as SMILES strings and XYZ coordinate blocks via the client.compute method in SKILL.md. 2. Boundary markers: None identified; input data is passed directly to the API client. 3. Capability inventory: Performs network operations to the Rowan cloud service. 4. Sanitization: No specific sanitization or validation of the chemical strings is documented within the skill instructions.
  • [SAFE]: Follows best practices for API key management by utilizing environment variables and placeholders for sensitive information.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 12:55 AM