pymatgen
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard wrapper for the pymatgen materials science library, providing legitimate functionality for crystal structure analysis and conversion.- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill documentation includes instructions for managing a Materials Project API key via environment variables. This follows standard security practices for API authentication and does not involve hardcoded credentials or unauthorized exfiltration.- [INDIRECT_PROMPT_INJECTION]: The skill processes external crystal structure files (CIF, POSCAR, XYZ) which serve as an ingestion point for untrusted data. Ingestion points include file reads in scripts like
structure_analyzer.pyandstructure_converter.py. While the skill has file-write and subprocess capabilities, no boundary markers or specific sanitization is present as the data is used for scientific calculation rather than prompt interpolation. This surface is inherent to the skill's intended use.
Audit Metadata