drug-db-pubchem
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with the official and well-known PubChem PUG-REST API provided by the National Institutes of Health (NIH) at
pubchem.ncbi.nlm.nih.gov. - [SAFE]: The Python implementation uses standard libraries for networking and data parsing, avoiding the introduction of untrusted third-party dependencies.
- [SAFE]: Sensitive data types like SMILES strings and InChI keys are transmitted via HTTP POST requests to prevent potential command or URL injection vulnerabilities and ensure data integrity during transmission.
- [SAFE]: The script includes built-in protection against API abuse through a sliding-window rate limiter and adaptive throttling based on server response headers.
- [SAFE]: No evidence of hardcoded credentials, obfuscation, data exfiltration to unauthorized domains, or unauthorized persistence mechanisms was found in the analyzed files.
Audit Metadata