external-mindstudio-msmodelslim-model-adapt

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/step2_run_quantization.py utilizes subprocess.run to execute the msmodelslim tool as a module. This execution is performed using a list of arguments for security and is a fundamental component of the skill's quantization workflow.
  • [REMOTE_CODE_EXECUTION]: The script scripts/step3_verify_weights.py uses torch.load() to compare model weights. While torch.load has known security considerations with untrusted files, its use here is standard for local weight verification. The skill also utilizes the trust_remote_code=True parameter in various model loading functions, which is a common requirement for processing non-standard Transformer architectures.
  • [SAFE]: The assets/vlm_model_adapter_template.py template implements path validation via get_valid_read_path when processing image samples in the handle_dataset method, which mitigates potential path traversal or unauthorized file access risks.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 06:28 AM
Security Audit — agent-trust-hub — external-mindstudio-msmodelslim-model-adapt