datamol
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the
datamollibrary along with optional cloud backendss3fsandgcsfsfrom official package registries. These are standard tools for scientific data management. - [COMMAND_EXECUTION]: Employs the
Bashtool to manage the Python environment and install required dependencies as part of the skill's setup process. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted molecular data from external file formats and remote URLs, creating a vulnerability surface for indirect instructions.
- Ingestion points: External data is ingested through
dm.read_sdf,dm.read_csv,dm.read_excel, and the universaldm.open_dffunction acrossreferences/io_module.mdandreferences/core_workflows.md. - Boundary markers: No explicit natural language delimiters or "ignore embedded instructions" warnings are provided for the data being parsed into the agent's context.
- Capability inventory: The skill has access to
Bash,Read,Write, andEdittools, allowing for substantial environmental interaction based on processed inputs. - Sanitization: The skill incorporates built-in chemical validation through
dm.sanitize_molanddm.standardize_molto ensure structural integrity and filter malformed molecular data.
Audit Metadata