rfd4-proteina-nim
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a dedicated helper script (
scripts/design.py) built with the Python standard library to communicate with the NVIDIA RFD4-Proteina NIM API. This centralizes interaction logic and minimizes the potential for arbitrary tool abuse. - [SAFE]: Credential management is handled through environment variables (
NVIDIA_API_KEY,NGC_API_KEY). The implementation includes specific security measures to prevent credential leakage, such as disabling automatic HTTP redirects and strictly validating the API endpoint URL to ensure secrets are only sent to the official NVIDIA host. - [SAFE]: Data validation and path traversal prevention are implemented in the design helper. The script validates filenames provided in input data to ensure they are bare names without directory components or null bytes, and verifies that molecular structure data (mmCIF) follows the expected format before processing.
- [SAFE]: Network activity is restricted to well-known NVIDIA API domains or user-defined local endpoints. The skill declarations correctly scope the use of
WebFetchandEnvtools to the intended inference functionality. - [SAFE]: Analysis of the instructions and bundled assets found no evidence of prompt injection, persistence mechanisms, or obfuscated content.
Audit Metadata