skills/zaoqu-liu/scienceclaw/molfeat/Gen Agent Trust Hub

molfeat

Warn

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill includes a code example for caching results using pickle.load(). Deserializing data with the pickle module is a known security risk that can lead to arbitrary code execution if the input cache file is compromised.
  • [EXTERNAL_DOWNLOADS]: The library uses the PretrainedMolTransformer and ModelStore components to download model weights and configuration data from official infrastructure at runtime.
  • [COMMAND_EXECUTION]: The documentation provides shell commands for package installation and optional dependency management using the uv package manager.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 16, 2026, 08:26 AM