Audit History
deepchem - 4 audits
Audit version 4
Latest SafeJan 17, 2026, 06:41 AM
This is a legitimate scientific computing skill for DeepChem molecular machine learning. All 237 static findings are false positives. The findings originate from markdown documentation code examples being incorrectly flagged as executable Ruby/shell commands. Common English words in chemistry documentation are matching C2 security patterns. The Python scripts use argparse for safe argument handling with no hardcoded secrets or dangerous operations.
Risk Factors
โก Contains scripts (3)
๐ Filesystem access (3)
๐ Network access (1)
Audit version 3
SafeJan 17, 2026, 06:41 AM
This is a legitimate scientific computing skill for DeepChem molecular machine learning. All 237 static findings are false positives. The findings originate from markdown documentation code examples being incorrectly flagged as executable Ruby/shell commands. Common English words in chemistry documentation are matching C2 security patterns. The Python scripts use argparse for safe argument handling with no hardcoded secrets or dangerous operations.
Risk Factors
โก Contains scripts (3)
๐ Filesystem access (3)
๐ Network access (1)
Audit version 2
SafeJan 12, 2026, 04:15 PM
This is a legitimate scientific computing skill for molecular machine learning. All static analysis findings are false positives resulting from pattern matching without context understanding. The skill provides safe molecular property prediction capabilities using the DeepChem library.
Risk Factors
โ๏ธ External commands
๐ Network access
๐ Filesystem access
๐ Env variables
Audit version 1
Medium RiskJan 4, 2026, 05:09 PM
Contains executable Python scripts for molecular ML training. Scripts access local data files and download public datasets and pretrained models through DeepChem. No credential harvesting, obfuscation, or suspicious network behavior detected.