matchms-spectral-matching
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of standard Python data science libraries (matchms, numpy, pandas) from PyPI using the uv package manager.\n- [REMOTE_CODE_EXECUTION]: The library includes functionality to load and save spectra using the Python pickle format via load_from_pickle and save_as_pickle. Deserializing untrusted pickle data is a known security risk that can lead to arbitrary code execution, although it is a standard practice for performance in data science pipelines.
Audit Metadata