CP2K Cross-Code Input Studio

• Analyzed: May 11, 2026, 6:54 AM
• Findings: 1
• Version: 1.0.1
• Hash: 0d998e0709c458d81e0d433533a6bd08df36b68a6d4d45f034ec7391ccba9b0c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate utility for generating and converting CP2K computational chemistry input files. The Python scripts (normalize-request.py, render-cp2k-input.py, convert-cp2k-input.py) perform deterministic text processing and file I/O without any network access, obfuscation, or dangerous execution patterns. The use of subprocess.run in generate_cp2k_bundle.py is limited to calling other local scripts within the bundle using the current Python interpreter, and the SKILL.md instructions focus on scientific accuracy and transparency rather than attempting prompt injection or unauthorized system access.