mat-db-nist-janaf
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: A thorough review of the skill's instructions, examples, and Python scripts confirms that the code performs its stated scientific functions without malicious behavior.
- [EXTERNAL_DOWNLOADS]: The script
scripts/query_janaf.pyuses therequestslibrary to fetch data fromhttps://webbook.nist.gov. This is a well-known, official government service for thermochemical data and is essential for the skill's primary use case. - [COMMAND_EXECUTION]: No unauthorized or dangerous command execution patterns were found. The skill uses standard argument parsing and file writing operations.
- [DATA_EXFILTRATION]: The skill does not access sensitive credential files or environment variables. All network communication is directed to the authoritative NIST domain.
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it ingests and parses HTML content from the web. However, since the data source is a trusted scientific resource and the skill lacks dangerous execution capabilities for the parsed data, the risk is negligible.
Audit Metadata