mol-paper-renderer
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script 'scripts/mol_paper_renderer.py' invokes the 'xyzrender' tool to process molecular data. The execution is handled through the Python subprocess module using a list of arguments, which effectively mitigates risks associated with shell command injection.
- [EXTERNAL_DOWNLOADS]: The skill references several external dependencies including 'xyzrender', 'rdkit', 'ase', 'phonopy', and 'cairosvg'. These are legitimate packages used in computational chemistry and are installed via standard package management tools from public registries.
- [SAFE]: No suspicious patterns such as prompt injection, data exfiltration, or obfuscation were found. The skill's behavior aligns with its stated purpose of rendering molecular structures.
Audit Metadata