molfeat
Warn
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill includes a code example for caching results using
pickle.load(). Deserializing data with thepicklemodule is a known security risk that can lead to arbitrary code execution if the input cache file is compromised. - [EXTERNAL_DOWNLOADS]: The library uses the
PretrainedMolTransformerandModelStorecomponents to download model weights and configuration data from official infrastructure at runtime. - [COMMAND_EXECUTION]: The documentation provides shell commands for package installation and optional dependency management using the
uvpackage manager.
Audit Metadata