genmol-nim
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and shell command templates for deploying a local NVIDIA NIM using Docker.
- Evidence:
SKILL.mdandreferences/api.mdinclude commands fordocker login,docker run, and polling a local health check endpoint (/v1/health/ready). - Security Posture: The skill includes security-conscious configurations, such as binding the local API to
127.0.0.1and advising the agent to disable shell tracing (set +x) to protect credentials during setup. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading a container image from NVIDIA's registry and installing a Python package for chemical notation conversion.
- Evidence: Mentions
docker login nvcr.iofor pullingnvcr.io/nim/nvidia/genmol:1.0.1and recommendspip install safe-molinreferences/api.md. - Source Analysis: Both
nvcr.ioand thesafe-molpackage are official resources provided by the skill author (NVIDIA). - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests and processes user-provided molecular data (SMILES/SAFE strings).
- Ingestion Points: User-supplied chemical scaffolds and motifs are interpolated into API request payloads and potentially processed by the
safe-mollibrary. - Boundary Markers: The skill utilizes JSON payloads for API communication, which provides inherent structure, but does not explicitly define delimiters for untrusted chemical notation strings.
- Capability Inventory: The skill utilizes
Bashfor container management andrequestsfor network operations to hosted or local endpoints. - Sanitization: The skill mentions handling
SAFEFragmentationErrorand recommends validation usingRDKitinreferences/validation.mdto ensure chemical validity.
Audit Metadata