kermt-add-cmim-pretrain
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute repository scripts and thedockerCLI to manage containerized training environments. These calls are strictly functional and use list-based argument passing to mitigate injection risks. - [DYNAMIC_EXECUTION]: To handle molecular model state, the skill implements a custom
_VocabUnpicklerthat restricts object creation to a safe whitelist of types. It also uses PyTorch'sweights_only=Truemode for checkpoint loading to prevent arbitrary code execution via malicious artifacts. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided SMILES datasets in CSV format. The ingestion process includes structural validation using the RDKit library and numerical featurization, which minimizes the risk of the agent interpreting data as instructions.
Audit Metadata