molfeat
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill's documentation in SKILL.md and references/examples.md provides examples for using the Python
picklemodule to cache molecular embeddings. Thepickle.loadfunction is inherently unsafe as it can execute arbitrary code during the deserialization of a potentially malicious file.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process SMILES strings and other molecular representations from external sources. The lack of validation for these inputs, especially when used in conjunction with suggested caching mechanisms, presents a potential attack surface.\n - Ingestion points: SMILES strings and molecular data processed in SKILL.md and references/examples.md.\n
- Boundary markers: None present in the provided examples.\n
- Capability inventory: File system access for state persistence and caching, plus network capability for downloading models via ModelStore.\n
- Sanitization: No sanitization or validation logic for SMILES inputs is included in the demonstration code.
Audit Metadata