torchdrug
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads datasets and software components from well-known scientific and technology sources, including DeepChem's S3 infrastructure, Meta's public weight servers (dl.fbaipublicfiles.com), and the PyTorch Geometric wheel index.
- [DYNAMIC_EXECUTION]: The documentation describes the use of
torch.loadfor loading model checkpoints, noting that it relies on thepicklemodule. It proactively mitigates the risk of unsafe deserialization by explicitly instructing users to only load checkpoints from trusted sources. - [DYNAMIC_EXECUTION]: The installation process involves the native compilation of C++ extensions (torch-scatter and torch-cluster). This is a standard requirement for the TorchDrug environment, and the skill provides specific configuration steps to ensure compatibility within the user's environment.
- [INDIRECT_PROMPT_INJECTION]: The skill handles potentially untrusted data through SMILES strings and PDB files. The documentation includes best-practice advice on validating these inputs and local file sources to prevent processing malicious biological or chemical sequences.
Audit Metadata