rfd4-proteina-generate
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands, specifically the
rfd4-generatetool and several setup/validation scripts likepreflight.sh. These are standard operations for its stated purpose of protein design. - Evidence:
SKILL.mdand multiple reference files contain examples ofbashandrfd4-generatecommand execution. - [EXTERNAL_DOWNLOADS]: The skill references a setup process that involves downloading model checkpoints and example data from a public bucket associated with the project.
- Evidence:
references/overrides.mdmentions therfd4-proteina-public-e04abucket used by thedownload_example_data.shscript. - [INDIRECT_PROMPT_INJECTION]: The skill processes annotated CIF files and benchmark data as input. If these files are provided by untrusted third parties, they could potentially contain malicious metadata, though this is an inherent surface for scientific modeling tools.
- Evidence:
SKILL.md(Step 2) andreferences/outputs.mddescribe the ingestion and processing of external CIF data.
Audit Metadata