rowan

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill integrates with the Rowan Science cloud platform using its official Python SDK (rowan-python). All network operations are directed to the legitimate service domain api.rowansci.com for the purpose of molecular modeling.
  • [SAFE]: Credentials are handled securely. The documentation instructs users to provide the ROWAN_API_KEY via environment variables or manual configuration, avoiding hardcoded secrets.
  • [SAFE]: The skill includes a specific security warning regarding dependency confusion, advising users to install rowan-python and specifically avoid an unrelated package named rowan on PyPI.
  • [SAFE]: The dynamic code patterns observed, such as rowan.Folder.model_rebuild, are documented workarounds for specific type-hinting issues in the SDK's Pydantic models and do not involve execution of untrusted input.
  • [SAFE]: Input validation is encouraged, with instructions provided to use the RDKit library to verify SMILES strings before they are submitted to the remote API.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 09:46 PM