Biomolecular structure prediction tools for Chai-1, Boltz-2, and Alphafold3 via SciMiner APIs.
Security Analysis
high confidenceThe skill's required access and runtime instructions are consistent with a SciMiner-based structure-prediction integration and do not ask for unrelated privileges or suspicious installs.
Name/description, SKILL.md examples, and the included sciminer_registry.py all center on invoking SciMiner tools (Chai-1, Boltz-2, Alphafold3). The single required env var (SCIMINER_API_KEY) is appropriate for a remote API integration.
Runtime instructions only describe calling SciMiner endpoints, polling for results, and uploading user-provided MSA/template files. There are no instructions to read unrelated local files or environment variables, nor to exfiltrate data to third-party endpoints beyond sciminer.tech.
No install spec and no external downloads — the skill is instruction/code-only. Nothing is written to disk by an installer as part of the skill package.
Only SCIMINER_API_KEY is required (declared as primaryEnv). That single credential directly maps to the documented use (X-Auth-Token header) and is proportionate to the purpose.
always is false and the skill does not request elevated or persistent system-wide privileges. It does not attempt to modify other skills or agent configuration.
Guidance
This skill appears coherent, but consider these practical precautions before installing: 1) Verify sciminer.tech is a trusted service and you are comfortable sending sequence/MSA/template files there (these may contain sensitive research data). 2) Use a scoped API key for SciMiner (do not reuse high-privilege or long-lived credentials). 3) Confirm the '/console/api' endpoints in the SKILL.md are legitimate (the path includes 'internal', so verify the vendor docs). 4) The skill will include the share_url returned by SciMiner when summarizing results — be mindful that link recipients may be able to view full results online. 5) If you require auditability, review sciminer_registry.py (included) to ensure the listed provider/tool names and file-parameter mappings match your expectations. If any of these checks raise doubts, obtain clarification from the skill author or use alternate, vetted tools.
Latest Release
v1.0.5
- Updated documentation to specify that the SciMiner API key is free. - Adjusted instructions to clarify users should obtain a "free SciMiner API key" from https://sciminer.tech/utility. - No functional or code changes; documentation only.
More by @xiongzhp
Published by @xiongzhp on ClawHub
