coreml-optimizer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
coremltoolsPython package, which is the official library provided by Apple for CoreML model conversion and optimization. - [COMMAND_EXECUTION]: The skill includes code snippets and workflow templates that involve executing shell commands such as
pip installfor dependency management andxcodebuildfor running performance test suites on iOS/macOS devices. - [INDIRECT_PROMPT_INJECTION]: The skill contains logic for processing external machine learning models (
.mlpackagefiles) and calibration datasets which represent an indirect prompt injection surface. - Ingestion points: Model loading via
ct.models.MLModel("Model.mlpackage")and calibration data ingestion in functions likeload_calibration_datafound inreferences/compression-techniques.md. - Boundary markers: None; the skill does not explicitly define delimiters to separate model metadata or data samples from system instructions.
- Capability inventory: The skill possesses the ability to read and write files (
mlmodel.save), execute model inference (model.prediction), and trigger performance benchmarks via shell execution. - Sanitization: The instructions do not specify sanitization or integrity checks for the ingested models or data, relying on the underlying
coremltoolslibrary for parsing.
Audit Metadata