drug-retrosynthesis
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Authentication is handled via the RXN_API_KEY environment variable, avoiding hardcoded credentials and following standard security practices.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the 'rxn4chemistry' Python package, which is the legitimate library for interacting with the IBM RXN for Chemistry API.
- [DATA_EXFILTRATION]: Molecular SMILES strings are transmitted to 'rxn.res.ibm.com'. This is the intended functional purpose of the skill and involves a well-known service provided by IBM.
- [COMMAND_EXECUTION]: The provided Python script 'evaluate_ibm_rxn.py' performs legitimate API polling and local data processing without attempting privilege escalation or persistence.
Audit Metadata