deepchem
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with untrusted external data by loading molecular datasets from various file formats, creating a potential surface for indirect prompt injection if data contains adversarial content.
- Ingestion points: The skill utilizes
dc.data.CSVLoader,dc.data.SDFLoader,dc.data.FASTALoader,dc.data.ImageLoader, anddc.data.JsonLoaderinSKILL.mdand referenced scripts (e.g.,scripts/graph_neural_network.pyandscripts/predict_solubility.py) to process user-supplied files. - Boundary markers: Absent; the skill processes molecular structures (SMILES strings, SDF data) directly as model inputs without explicit natural language delimiters.
- Capability inventory: The skill is capable of reading local files, performing network operations to download datasets and models, and executing machine learning training and prediction logic via
model.fit()andmodel.predict(). - Sanitization: The skill relies on DeepChem's featurizers (like
CircularFingerprintorMolGraphConvFeaturizer) which treat inputs as chemical entities, effectively limiting the scope for natural language instruction processing from the data. - [EXTERNAL_DOWNLOADS]: The skill references and fetches resources from well-known and trusted technology services for its primary operations.
- Fetches standardized benchmark datasets (MoleculeNet) using
dc.molnet.load_*functions inSKILL.md,scripts/graph_neural_network.py, andscripts/transfer_learning.py. - Downloads pretrained molecular models (e.g.,
ChemBERTa,MoLFormer) from Hugging Face's official repository usingdc.models.HuggingFaceModelinscripts/transfer_learning.py.
Audit Metadata