mat-dft-electronic-transport
Warn
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute
scripts/generate_inputs.pyto prepare computational workflows. Running this script executes local Python logic that triggers the creation of complex materials science data structures. - [REMOTE_CODE_EXECUTION]: The script
scripts/generate_inputs.pyimportsjobflow_remote.submit_flowand contains code to transmit the generated computational DAG to a remote worker (perlmutter_worker) on an external HPC cluster. This behavior offloads local intent to remote infrastructure without explicit confirmation from the instruction set. - [REMOTE_CODE_EXECUTION]: The skill uses the
jobflow-remotepackage, which is not listed in the environment constraints section of the skill documentation, representing an unverified dependency that facilitates remote interactions. - [COMMAND_EXECUTION]: Instructions in
SKILL.mdclaim that the workflow generation script 'simply serializes the theoretical DAG to JSON'. However, the script code performs an active remote submission and fails to implement any file-writing logic for the--outputparameter, misleading the user about the script's side effects and execution boundary.
Audit Metadata