drug-discovery-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the
safe-molPython package for encoding SMILES notation. This is a standard dependency for the BioNeMo GenMol microservice. - [COMMAND_EXECUTION]: The skill includes Python code blocks that perform network requests to NVIDIA-hosted API endpoints (
health.api.nvidia.com). These operations are necessary for the pipeline's functionality and are clearly documented for the user. - [DATA_EXFÖRTRATION]: While the skill transmits molecule and target data to external APIs, it provides an explicit warning to the user: 'NOTE: molecule and target inputs and your NGC_API_KEY are transmitted to external NVIDIA-hosted API endpoints on every call. Use local NIM containers for confidential or proprietary data.' This transparency and the option for local deployment mitigate concerns about unauthorized data exposure.
- [CREDENTIALS_SAFE]: The skill uses the
NGC_API_KEYenvironment variable for authentication, which is a recommended practice for secret management. It does not contain hardcoded credentials. - [SAFE]: All analyzed components, including the benchmark data, evaluation configurations, and cryptographic signatures, are consistent with a professionally developed and verified skill from a trusted vendor.
Audit Metadata