Pharmaclaw Chemistry Query

• Analyzed: May 14, 2026, 4:13 AM
• Findings: 1
• Version: 2.0.1
• Hash: 29c822254eb336e5b85c42eaf71cf296017c2e7b1feb94deedd21a3f75e4a6a8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The pharmaclaw-chemistry-query bundle is a legitimate chemistry toolkit for PubChem data retrieval and RDKit analysis. It demonstrates strong security practices, including explicit input sanitization (null-byte rejection, length limits) and path traversal protections in scripts like `rdkit_mol.py` and `advanced_chem.py`. While `opsin_name_to_smiles.py` downloads an external JAR file, it implements SHA-256 checksum verification to ensure file integrity, and all subprocess calls are handled using list-based arguments to prevent shell injection.