drug-pocket-detection
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script scripts/detect_pockets.py executes the external scientific tools fpocket and prank using the subprocess.run method. The implementation follows security best practices by passing arguments as a list, which prevents shell command injection.
- [EXTERNAL_DOWNLOADS]: The SKILL.md documentation references official and well-known repositories (Conda-forge and GitHub) for its dependencies. The scripts themselves do not initiate any automated or unverified network connections.
- [COMMAND_EXECUTION]: The visualize_pockets.py script leverages the PyMOL library (pymol.cmd) to generate visualizations of detected pockets. These operations are performed locally on user-supplied data files.
- [SAFE]: A comprehensive audit of all script and documentation files confirms the absence of obfuscated code, hardcoded credentials, or exfiltration patterns. The skill's functionality is strictly limited to the described scientific analysis tasks.
Audit Metadata