genmol-nim

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates downloading molecular generation models from NVIDIA's NGC registry (nvcr.io) when running the NIM container locally. It also references the safe-mol Python package for molecular notation conversion.
  • [COMMAND_EXECUTION]: The skill provides standard Bash commands for managing Docker containers, including docker login, docker run, and health check loops using curl. These are documented as standard setup procedures for the local NIM environment.
  • [DATA_EXFILTRATION]: The skill transmits molecular data (in SAFE notation) to the hosted NVIDIA Health API (health.api.nvidia.com). This is the primary function of the skill and uses official vendor endpoints.
  • [CREDENTIALS_UNSAFE]: The skill uses NGC_API_KEY and NVIDIA_API_KEY for authentication. It correctly instructs users to manage these via environment variables or a .env file and explicitly warns against printing or hardcoding these keys in prompts or logs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 03:56 PM