pymatgen
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides a legitimate interface to the
pymatgenscientific library and the Materials Project database for materials analysis and property prediction.\n- [SAFE]: The skill adheres to security best practices for credential management by instructing the use of environment variables for the Materials Project API key (MP_API_KEY).\n- [INDIRECT_PROMPT_INJECTION]: The skill's analysis and conversion scripts ingest external structure files (such as CIF and POSCAR), which serves as an entry point for potential indirect prompt injection attacks.\n - Ingestion points:
Structure.from_file()calls inscripts/structure_analyzer.pyandscripts/structure_converter.py.\n - Boundary markers: The skill relies on structured scientific file formats for data delimitation without additional instructions to ignore potential embedded commands.\n
- Capability inventory: File system read/write access and network communication with the authenticated Materials Project API.\n
- Sanitization: Input content is validated by established crystallographic parsers within the
pymatgenlibrary, limiting the impact of malformed data.\n- [EXTERNAL_DOWNLOADS]: The skill installs thepymatgenandmp-apipackages from public registries and interacts with the establishedmaterialsproject.orgAPI service for data retrieval.
Audit Metadata