python
Warn
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a recipe in
references/recipes/click-cli.mdfor auto-discovering commands by dynamically compiling and executing Python files in a plugin directory usingexec(compile(f.read(), f.name, "exec"), ns, ns). - [REMOTE_CODE_EXECUTION]: Recipes in
references/recipes/service-patterns.mdandreferences/recipes/ray-training.mddemonstrate dynamic module loading and execution usingimportlib.import_moduleandgetattrto resolve and run functions from string-based module paths. - [COMMAND_EXECUTION]: The
references/recipes/ray-training.mdfile includes patterns for executing shell commands viasubprocess.run, including calls to the AWS CLI (aws s3 sync) and a customSubprocessExecutorthat launches tasks usinguv run. - [EXTERNAL_DOWNLOADS]: The documentation frequently instructs users to install external Python dependencies (such as
ray,mlflow, andwarp-lang) and utilizeruntime_env.pipto provision environments on distributed worker nodes. - [PROMPT_INJECTION]: The
RayExecutorandSubprocessExecutorimplementations inreferences/recipes/ray-training.mdingest structuredJobSpecdata which is passed into dynamically loaded functions, creating an indirect prompt injection surface if inputs are derived from untrusted sources.
Audit Metadata