ml-property-predictor
Warn
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of
subprocess.runto manage training and evaluation tasks across isolated Conda environments, specifically seen inexamples/mace_bulk_modulus/run_mace.pyandexamples/matgl_bulk_modulus/run_matgl.py. - [COMMAND_EXECUTION]: In
scripts/train_mace_property.py, the skill implements a dynamic code execution pattern where it writes a temporary Python wrapper script to the filesystem and then executes it usingsys.executable. This mechanism is used to patch themace.cli.run_trainmodule to freeze the model backbone. - [EXTERNAL_DOWNLOADS]: The
scripts/train_matgl_property.pyscript performs network operations to download pre-trained weights from the MatGL model registry. These downloads originate from well-known scientific sources but represent external binary artifacts. - [COMMAND_EXECUTION]:
scripts/train_mace_property.pyincludes a hardcoded absolute fallback path to a developer's local home directory (/home/bdeng/...) to locate necessary patch scripts, indicating environment-specific dependencies that may lead to execution failures on different systems.
Audit Metadata