mindspeed-fsdp2-verification
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates for executing shell commands and Python scripts (e.g.,
torchrun,pytest,python -m py_compile). These are used to verify the integrity and functionality of the migrated models and data. The execution is limited to local development assets. - [DATA_INGESTION]: The skill processes user-provided configuration files (YAML) to extract model and data paths. It uses
yaml.safe_loadfor parsing, which is a recommended security practice to prevent arbitrary code execution during deserialization. - [DYNAMIC_EXECUTION]: Verification logic is implemented using Python heredocs (`python
- <<'PY'`) to perform runtime checks on configurations and environment states. This is a functional requirement for the skill's primary purpose of automated verification.
- [SAFE_PRACTICES]: The skill implements strict execution protocols, including requirements for command evidence and explicit forbidden behaviors (such as using dummy checks), which enhances the reliability and auditability of the verification process.
Audit Metadata