se-dev-torch
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a pre-compiled
busyboxexecutable for Windows fromhttps://frippery.org/files/busybox/busybox64u.exeto provide UNIX-like shell commands during preparation. - [REMOTE_CODE_EXECUTION]: Downloads and executes an installation script from
https://astral.sh/uv/install.shto provision theuvPython package manager. This is the official installation method for the tool. - [COMMAND_EXECUTION]: The skill orchestrates environment setup and indexing via
Prepare.batandPrepare.sh, usinguv runfor Python execution and BusyBox for cross-platform shell consistency. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it parses and displays external C# code from the Torch repository.
- Ingestion points:
index_torch.pyandsearch_torch.pyread source files from the locally clonedTorchAPI/Torchrepository. - Boundary markers: None; search results are displayed without specific delimiters or safety warnings.
- Capability inventory: The skill has shell command execution capabilities through its provided
Bashtools. - Sanitization: Content from the framework source code is indexed and displayed without sanitization of comments or metadata.
Audit Metadata