neuron-framework-autoport
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The module
scripts/validator/main.pyimplements dynamic code loading usingimportlib.util.spec_from_file_locationandspec.loader.exec_module. This is used to import model and configuration classes from generated files located in theneuron_port/directory. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted model data and exposes an execution surface:
- Ingestion points:
scripts/validator/main.pyandscripts/validator/enhanced_metrics.pyload model configurations and tokenizers frommodel_path(HuggingFace repositories). - Boundary markers: Absent; the skill does not explicitly isolate or warn against instructions embedded in downloaded model files.
- Capability inventory: The skill uses
trust_remote_code=Truein severaltransformerslibrary calls (loading models, tokenizers, and configs), allowing third-party modeling code to execute on the host. It also executes shell commands for environment management. - Sanitization: Absent; model contents are trusted and executed as part of the validation pipeline.
- [COMMAND_EXECUTION]: Shell scripts such as
scripts/setup_autoport.shandscripts/setup_dry_run.share used to manage system packages, Python virtual environments, and dependencies. These scripts include path manipulations and automated installation logic. - [EXTERNAL_DOWNLOADS]: The skill is configured to download dependencies from a non-standard AWS repository (
https://pip.repos.neuron.amazonaws.com) and fetches large-scale weights and code from HuggingFace.
Audit Metadata