musa-pytorch-code-porting
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of hardware diagnostic tools (e.g.,
mthreads-gmi,musaInfo) and distributed training launchers (e.g.,torchrun) as part of its core development workflow for MUSA accelerators. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external repository data such as
AGENTS.mdand environment documentation, creating a potential surface for indirect prompt injection. However, it includes explicit constraints to prevent bypassing repository-level security or usage restrictions. - Ingestion points: Repository-level
AGENTS.md, environment documentation, and experiment rules (SKILL.md). - Boundary markers: Present; the instructions explicitly state that repository documentation remains authoritative and forbid the agent from bypassing restrictions on GPU runs, data preparation, or artifact paths.
- Capability inventory: Shell command execution for hardware status, build system invocation for MUSA extensions, and distributed process management via
torchrun. - Sanitization: No explicit sanitization or filtering of external repository content is documented.
- [DYNAMIC_EXECUTION]: The skill provides templates for compiling native MUSA extensions (using
.muand.cppsources) viasetuptoolsandtorch_musabuild utilities. It also describes runtime API adaptation usingtorchadato maintain compatibility with legacy CUDA codebases.
Audit Metadata