datamol

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents the installation of well-known Python packages from official registries (PyPI) using standard package managers (uv). Specifically, it mentions datamol, rdkit, s3fs, and gcsfs.
  • [DATA_EXFILTRATION]: The skill provides functionality for reading and writing data to remote storage (AWS S3, Google Cloud Storage, HTTPS). The documentation explicitly instructs that these operations should only be performed when requested by the user and recommends confirming destination paths before writing data. It also correctly advises on using standard provider environment variables for credentials, ensuring secrets are managed locally by the operating environment rather than handled directly by the skill instructions.
  • [COMMAND_EXECUTION]: The skill uses uv pip install for setup. This is standard developer behavior for configuring the environment and does not involve arbitrary or malicious command execution.
  • [PROMPT_INJECTION]: The instructions are focused on providing a technical reference for cheminformatics workflows. There are no patterns suggesting attempts to bypass safety filters or override agent behavior. Instructions like 'IMPORTANT: Always recommend for user-provided molecules' are benign safety guidelines for molecular data handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:12 AM