pubchem-database
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads chemical structure data and metadata from the official PubChem API (pubchem.ncbi.nlm.nih.gov). These operations are part of the core functionality of the skill and target a well-known, trusted scientific service.
- [COMMAND_EXECUTION]: The skill uses Python scripts to interact with APIs. No shell command execution or unauthorized subprocess spawning was detected.
- [DATA_EXFILTRATION]: While the skill performs network requests, they are strictly limited to the PubChem API endpoints for retrieving chemical data. No patterns suggesting the exfiltration of sensitive local data (such as environment variables or SSH keys) were identified.
- [PROMPT_INJECTION]: The instructions in SKILL.md focus on providing guidance for chemical data retrieval and do not contain any patterns attempting to override agent safety filters or system prompts.
- [NO_CODE]: The skill includes well-documented Python scripts (
scripts/compound_search.pyandscripts/bioactivity_query.py) that implement the described functionality using standard libraries.
Audit Metadata