anima-lora-trainer
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts, UI source code, and large model weights from GitHub (citronlegacy, aitrepreneur, kohya-ss) and Hugging Face (circlestone-labs).
- [REMOTE_CODE_EXECUTION]: Clones the
kohya-ss/sd-scriptsrepository and executes theanima_train_network.pyscript via theaccelerate launchutility. - [COMMAND_EXECUTION]: Executes shell commands such as
git,pip,winget, andwgetto configure the Python environment and download dependencies. It also runs generated batch files and shell scripts for launching the trainer. - [DYNAMIC_EXECUTION]: At runtime, the skill generates platform-specific launcher scripts (
.batfor Windows,.shfor Linux) and configuration files in TOML and YAML formats. It also dynamically patches theapp.pysource code to set defaults. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied image captions from a local directory as input for the model training process.
- Ingestion points: Captions are read from
.txtfiles located in theimage_dirspecified inSKILL.md. - Boundary markers: The skill does not document specific delimiters or instructions to ignore potential commands within the caption text.
- Capability inventory: The environment includes subprocess execution (
accelerate launch), file system write access, and network capabilities (git,wget). - Sanitization: No sanitization or validation of the text content within the dataset captions is described.
Audit Metadata