rowan
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with the Rowan Science cloud platform using its official Python SDK (
rowan-python). All network operations are directed to the legitimate service domainapi.rowansci.comfor the purpose of molecular modeling. - [SAFE]: Credentials are handled securely. The documentation instructs users to provide the
ROWAN_API_KEYvia environment variables or manual configuration, avoiding hardcoded secrets. - [SAFE]: The skill includes a specific security warning regarding dependency confusion, advising users to install
rowan-pythonand specifically avoid an unrelated package namedrowanon PyPI. - [SAFE]: The dynamic code patterns observed, such as
rowan.Folder.model_rebuild, are documented workarounds for specific type-hinting issues in the SDK's Pydantic models and do not involve execution of untrusted input. - [SAFE]: Input validation is encouraged, with instructions provided to use the RDKit library to verify SMILES strings before they are submitted to the remote API.
Audit Metadata