OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill provides standard molecular machine learning utilities using the DeepChem library and is generally safe. A low-risk indirect prompt injection vulnerability surface exists because the instructions direct the agent to fetch citation metadata from an external arXiv URL at runtime without explicit validation or boundaries. It also references downloading standard pretrained models from Hugging Face.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed