pytdc

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the 'PyTDC' package from PyPI and downloads curated drug discovery datasets from the official Therapeutics Data Commons servers (tdcommons.ai) and associated GitHub repositories. These are well-known scientific resources and represent the intended primary purpose of the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external biological and chemical data (SMILES strings, protein sequences) ingested from the TDC platform.
  • Ingestion points: Data is loaded via the 'tdc' library in scripts such as 'load_and_split_data.py' and 'molecular_generation.py'.
  • Boundary markers: Data is treated as structured numerical or string-based scientific entities rather than natural language instructions.
  • Capability inventory: Capabilities are limited to local data processing using 'pandas' and 'numpy', and writing datasets to a local 'data/' directory. No arbitrary shell execution or network exfiltration from the data content was detected.
  • Sanitization: Datasets are sourced from a curated scientific platform, though users should apply standard data validation when training models on external chemical space.
  • [COMMAND_EXECUTION]: The skill provides instructions for installing dependencies using the 'uv' package manager. These commands are standard for setting up the Python environment required for the TDC library.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:40 PM