model-datasets

Fail

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the installation script for the uv tool from the official Astral domain (astral.sh) and pipes it to a shell for execution. This is a standard installation procedure for this package manager.
  • [COMMAND_EXECUTION]: Executes shell commands to install specific tools (huggingface_hub, modelscope-hub) and manage model downloads using the Hugging Face and ModelScope command-line interfaces.
  • [PRIVILEGE_ESCALATION]: Contains instructions for performing administrative system tasks, including partitioning and formatting disks and modifying the /etc/fstab configuration file. These operations require elevated privileges and can be destructive if not performed correctly.
  • [PERSISTENCE]: Suggests appending environment variable declarations to user shell profile files (such as ~/.bashrc or ~/.zshrc) to ensure that configurations like cache paths and endpoints remain active in new sessions.
  • [DYNAMIC_EXECUTION]: Provides a reusable bash script template (dl) that the user is intended to save and run locally to standardize the organization of downloaded models and datasets.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect injection surface. Ingestion points: platform names and repository IDs provided by the user. Boundary markers: absent. Capability inventory: includes shell command execution and filesystem writes across all provided instructions. Sanitization: relies on basic bash shell script error handling (set -euo pipefail).
Recommendations
  • HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 27, 2026, 03:03 PM