diffdock

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Detailed analysis of the skill's scripts and documentation reveals no malicious intent or security vulnerabilities. The skill adheres to the primary purpose of providing a scientific tool wrapper.
  • [COMMAND_EXECUTION]: The skill provides instructions for executing shell commands to run molecular docking simulations and helper scripts. These commands are standard for the tool's operation and do not involve unsanitized user input in a dangerous manner. The helper scripts (analyze_results.py, prepare_batch_csv.py, setup_check.py) perform legitimate file processing tasks such as parsing scientific data formats (SDF, PDB) and checking environment status.
  • [EXTERNAL_DOWNLOADS]: The documentation references official GitHub repositories and Docker Hub images associated with the Regina Barzilay Group at MIT CSAIL. It also mentions the automatic downloading of model checkpoints, which is standard behavior for deep learning frameworks. These sources are considered well-known and reputable in the academic and AI research community.
  • [DYNAMIC_EXECUTION]: The scripts/setup_check.py file uses the __import__ function to programmatically verify the presence of required Python packages. This usage is safe as the package names are hardcoded within the script and not derived from untrusted input.
  • [DATA_EXPOSURE]: There is no evidence of hardcoded credentials, API keys, or logic that attempts to exfiltrate data from the user's environment. The skill focuses entirely on local computational chemistry tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 08:21 AM
Security Audit — agent-trust-hub — diffdock