model-trainer
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill correctly uses the
hf_jobsMCP tool to execute training scripts on Hugging Face's ephemeral infrastructure. This is the intended purpose of the skill and follows secure implementation patterns. - [EXTERNAL_DOWNLOADS]: Fetches model conversion tools and training templates from trusted sources, including Hugging Face's official GitHub repositories and the well-known
llama.cpprepository. - [COMMAND_EXECUTION]: Utilizes
subprocess.runto install build dependencies (such ascmakeandbuild-essential) and run model quantization binaries within the isolated job environment. This is required for its primary function of GGUF conversion. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to ingest and process external datasets from the Hugging Face Hub. Ingestion points:
datasets.load_datasetcalls in training scripts. Boundary markers: None. Capability inventory: Execution of Python training code via thehf_jobstool. Sanitization: Relies on the standard Hugging Facedatasetslibrary processing. This represents a standard surface for a model-training tool.
Audit Metadata