neuron-framework-equivalence
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.run()to execute system utilities likeneuron-lsto verify the environment and hardware availability (intemplates/neuron_device_validator_template.py). These are standard checks for the intended purpose. - [DYNAMIC_EXECUTION]: The skill employs
importlib.import_module()andimportlib.util.spec_from_file_location()to dynamically load the target model's modeling file and user-defined test files (inscripts/adapters/nxdi.py,scripts/nxdi_compiled_loader.py, andscripts/run_stage2.py). This is a core architectural requirement for analyzing arbitrary model implementations. - [EXTERNAL_DOWNLOADS]: The skill fetches model configurations, tokenizers, and reference weights from HuggingFace using the
transformerslibrary (e.g.,AutoModelForCausalLM.from_pretrained). These are standard operations targeting well-known services (HuggingFace) for obtaining reference data. - [SAFE]: All detected dangerous patterns (shell execution, dynamic imports, remote model fetching) are strictly scoped to the primary purpose of the skill: benchmarking and verifying machine learning model implementations. No signs of obfuscation, exfiltration, or unauthorized persistence were found.
Audit Metadata