chembl-database

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOWEXTERNAL_DOWNLOADS
Full Analysis
  • EXTERNAL_DOWNLOADS (LOW): The skill requires installing chembl_webresource_client and optionally pandas via pip. While these are legitimate and well-known libraries in the scientific community, they constitute external dependencies.
  • DATA_EXFILTRATION (SAFE): The skill performs network operations to interact with the ChEMBL database (ebi.ac.uk). No evidence of sensitive local file access or unauthorized data transmission was found.
  • INDIRECT_PROMPT_INJECTION (LOW): The skill ingests untrusted external data from the ChEMBL API and user-provided search strings (SMILES, names).
  • Ingestion points: API responses in get_molecule_info, get_target_info, and get_bioactivity_data in scripts/example_queries.py.
  • Boundary markers: Not present; the script returns raw dictionary/list objects from the client.
  • Capability inventory: Network requests via chembl_webresource_client.
  • Sanitization: None performed in the script; relies on the client library for request formatting.
  • OBFUSCATION (SAFE): No obfuscated code, encoded strings, or hidden characters were detected in the provided files.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 12:32 PM