genmol-nim
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading molecular generation models from NVIDIA's NGC registry (
nvcr.io) when running the NIM container locally. It also references thesafe-molPython package for molecular notation conversion. - [COMMAND_EXECUTION]: The skill provides standard Bash commands for managing Docker containers, including
docker login,docker run, and health check loops usingcurl. These are documented as standard setup procedures for the local NIM environment. - [DATA_EXFILTRATION]: The skill transmits molecular data (in SAFE notation) to the hosted NVIDIA Health API (
health.api.nvidia.com). This is the primary function of the skill and uses official vendor endpoints. - [CREDENTIALS_UNSAFE]: The skill uses
NGC_API_KEYandNVIDIA_API_KEYfor authentication. It correctly instructs users to manage these via environment variables or a.envfile and explicitly warns against printing or hardcoding these keys in prompts or logs.
Audit Metadata