skills/ascend-ai-coding/awesome-ascend-skills/external-cannbot-ops-triton-op-verifier/Gen Agent Trust Hub
external-cannbot-ops-triton-op-verifier
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The scripts
scripts/verify.pyandscripts/benchmark.pyutilizeimportlib.import_moduleto dynamically load and execute Python classes from a provided verification directory. This allows the skill to test various operator implementations against reference versions. - [COMMAND_EXECUTION]:
scripts/verify.pyusessubprocess.Popento execute a copy of itself as a sub-process. This architecture is used to enforce execution timeouts and provide a layer of process isolation during kernel verification. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and execute code files which may be produced by other agents or influenced by untrusted user inputs. * Ingestion points: Code and task files are read from paths provided in the
generated-code-pathandtask-file-patharguments. * Boundary markers: The skill does not implement explicit prompt boundary markers. * Capability inventory: The skill has the capability to execute code viaimportliband manage processes viasubprocess. * Sanitization: Thescripts/validate_triton_impl.pyscript performs AST analysis to verify that the generated code contains expected Triton kernel decorators and does not contain prohibited PyTorch functional calls.
Audit Metadata