esm
Warn
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: Several reference files (
esm-c-api.md,forge-api.md, andworkflows.md) include code examples that implement caching and checkpointing using the Pythonpicklemodule. Specifically, theEmbeddingCacheandCheckpointedBatchProcessorclasses usepickle.load()to read data from local files likeembeddings_cache.pklandcheckpoint.pkl. This function is insecure because it can execute arbitrary code during deserialization. An attacker who can influence these local files could achieve code execution on the user's system. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
esmpackage via PyPI and directly from the official Biohub GitHub repository. These sources are associated with the project's maintainers and follow standard development workflows.
Audit Metadata