openfold2-nim
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides users to fetch the OpenFold2 NIM container image from the vendor's official container registry at nvcr.io, which is a trusted and expected source for this service.
- [COMMAND_EXECUTION]: Includes shell commands for Docker setup, image authentication, and service readiness checks, all of which are primary functions required for local deployment and operation within the user's controlled environment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes protein sequence and alignment data from external sources. While these represent ingestion points for untrusted data, the processing is restricted to scientific analysis and artifact creation without impacting the agent's core instructions or security filters.
- [SAFE]: No malicious behavior, obfuscation, or safety bypass attempts were found. API key handling is managed securely via environment variables and local environment files, and the skill explicitly advises against practices that could lead to secret exposure.
Audit Metadata