pymatgen

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a standard wrapper for the pymatgen materials science library, providing legitimate functionality for crystal structure analysis and conversion.- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill documentation includes instructions for managing a Materials Project API key via environment variables. This follows standard security practices for API authentication and does not involve hardcoded credentials or unauthorized exfiltration.- [INDIRECT_PROMPT_INJECTION]: The skill processes external crystal structure files (CIF, POSCAR, XYZ) which serve as an ingestion point for untrusted data. Ingestion points include file reads in scripts like structure_analyzer.py and structure_converter.py. While the skill has file-write and subprocess capabilities, no boundary markers or specific sanitization is present as the data is used for scientific calculation rather than prompt interpolation. This surface is inherent to the skill's intended use.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:13 AM