geometry-optimizer
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
xtbcommand-line utility and internal test scripts viasubprocess.run. The commands are constructed using argument lists rather than raw shell strings, which is a secure implementation that mitigates command injection risks.\n- [SAFE]: The skill handles molecular data formats (SMILES, XYZ) using the RDKit library and dedicated parsers. There is no evidence of untrusted data being interpolated into agent prompts or used in a way that could lead to indirect prompt injection.\n- [SAFE]: No hardcoded credentials, sensitive file access (e.g., to.sshor.envfiles), or unauthorized network exfiltration attempts were identified in the codebase.\n- [SAFE]: The skill's YAML frontmatter and documentation accurately describe its functionality, and no deceptive metadata or hidden instructions were found.
Audit Metadata