openfold3-nim
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests biological sequence data and Multiple Sequence Alignments (MSAs) which are interpolated into API request payloads.
- Ingestion points: The
sequenceandmsafields in theinputspayload defined inSKILL.mdandreferences/api.md. - Boundary markers: MSAs are required to include a FASTA-style header (
>query\n) which serves as a basic delimiter for the alignment data. - Capability inventory: The skill utilizes
Writepermissions to save structure artifacts (PDB/CIF) andBashfor Docker container management and health checks. - Sanitization: No explicit sanitization of sequence characters is shown in the provided script examples before payload construction.
- [COMMAND_EXECUTION]: The skill provides shell commands for environment setup, authentication, and container deployment.
- Evidence:
SKILL.mdandreferences/api.mdcontain instructions fordocker login,docker run, and directory permissions management (chmod 755). These are legitimate operational steps for the local NIM microservice. - [EXTERNAL_DOWNLOADS]: The skill pulls a container image from a remote registry during the setup process.
- Evidence: Instructions include pulling
nvcr.io/nim/openfold/openfold3:latest. Thenvcr.iodomain is the official NVIDIA Container Registry, which is a vendor-owned resource.
Audit Metadata