rdkit
Warn
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The SKILL.md documentation recommends using the
picklemodule for fast loading of molecular data. Evidence: The 'Performance Optimization' section provides a code snippet usingpickle.load(f). This is a security concern becausepickle.load()is inherently insecure and can execute arbitrary code if the input file is malicious. Users should be cautioned against using this method for data originating from untrusted sources.
Audit Metadata