soup
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/soup.shhelper script executes environment diagnostics, including Python version checks and hardware backend availability tests (CUDA/MPS) using subprocess calls to Python and thesoupCLI. - [EXTERNAL_DOWNLOADS]: The skill documentation guides the user to install the
soup-clipackage and its training dependencies (torch,transformers,peft,trl) from the official Python Package Index (PyPI). - [PROMPT_INJECTION]: The skill processes untrusted external data through
soup ingestandsoup datacommands. While necessary for its fine-tuning purpose, the lack of boundary markers and sanitization during ingestion from attacker-controlled sources (like datasets or third-party logs) creates an indirect prompt injection surface. The skill maintains significant capabilities, including shell execution and file modification, which could be targeted by such injections. Evidence chain: 1. Ingestion points: Dataset and log processing viasoup dataandsoup ingestinreferences/commands.md. 2. Boundary markers: None identified. 3. Capabilities: Shell access and file writing. 4. Sanitization: Not specified.
Audit Metadata