Audit History

The molfeat skill is a legitimate cheminformatics library for molecular feature extraction. All 397 static findings are false positives triggered by scientific terminology in documentation. The scanner misinterpreted markdown code fences as shell commands, chemistry terminology (ecfp, maccs, gin, c2) as security threats, and documentation URLs as network indicators.

The molfeat skill is a legitimate cheminformatics library for molecular feature extraction. All 397 static findings are false positives triggered by scientific terminology in documentation. The scanner misinterpreted markdown code fences as shell commands, chemistry terminology (ecfp, maccs, gin, c2) as security threats, and documentation URLs as network indicators.

The molfeat skill is a legitimate cheminformatics library for molecular feature extraction. All static analysis findings are false positives - the flagged patterns are documentation examples showing legitimate scientific computing commands, not security threats.

Pure documentation skill with no executable code. Contains only markdown documentation and JSON configuration files describing the molfeat Python library. No network calls, file system access beyond its own directory, environment variable access, or command execution capabilities detected.