rfdiffusion-nim
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell commands for Docker orchestration, including authentication with
docker login nvcr.ioand service deployment viadocker run. These commands are intended to facilitate the setup of the local inference environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external protein structure data (
target.pdb), which represents a surface for indirect prompt injection. - Ingestion points: Data from
target.pdbis ingested into the agent context in the motif scaffolding and binder design sections ofSKILL.mdandreferences/examples.md. - Boundary markers: The skill does not define explicit delimiters or provided warnings to the agent to disregard instructions potentially embedded within the ingested PDB content.
- Capability inventory: The skill possesses
Bashexecution capabilities for Docker management andWriteaccess to save results inSKILL.md, and performs network operations via therequestslibrary inreferences/examples.md. - Sanitization: No structural validation or sanitization is performed on the ingested PDB content before it is included in API request payloads.
Audit Metadata