model-migration
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands to set up the environment and run training scripts.
- Evidence:
bash test/train_performance_8p_base_fp32.shis executed to start the training process. - Evidence: Uses
git clone,git apply,ln -sf, andmkdirfor filesystem and repository management. - [EXTERNAL_DOWNLOADS]: The skill downloads code and resources from external Git repositories.
- Evidence: Clones the Ascend DrivingSDK from
https://gitcode.com/Ascend/DrivingSDK(vendor resource). - Evidence: Clones the BEVFormer repository from
https://github.com/fundamentalvision/BEVFormer.git. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where instructions could be embedded in the external repositories it clones or the user-provided paths it processes.
- Ingestion points: External code cloned via
git clonefrom GitHub/GitCode and user-supplied filesystem paths for datasets and weights. - Boundary markers: None identified; external content is processed directly.
- Capability inventory: File writing (
mkdir,cp), symbolic link creation (ln), and shell script execution (bash). - Sanitization: No specific sanitization or validation of the cloned code or user paths is performed before execution.
Audit Metadata