diffdock
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones the source code for the DiffDock tool directly from a public GitHub repository (gcorso/DiffDock) and downloads pretrained model weights using a utility function.
- [COMMAND_EXECUTION]: Provides Python code that uses
subprocess.runto call theinference.pyscript from the cloned repository. The execution uses list-based arguments, which is a secure practice that prevents shell injection. - [REMOTE_CODE_EXECUTION]: Instructions include installing packages from standard registries (PyPI and PyTorch's wheel index) and cloning external code which is subsequently executed. This is the intended primary purpose of the skill and aligns with standard scientific software deployment patterns.
Audit Metadata