nanogpt
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Tiny Shakespeare dataset from a public GitHub repository for use in character-level training demonstrations. Evidence: Source URL
https://raw.githubusercontent.com/karpathy/char-rnn/master/data/tinyshakespeare/input.txtis referenced inreferences/data.mdandreferences/training.md.- [DYNAMIC_EXECUTION]: The training script utilizestorch.compile()to optimize the model graph into efficient kernels at runtime. Additionally, it uses thepickleandtorch.loadmodules for serializing and deserializing local metadata and model checkpoints. Evidence: Found in the training loop implementation withinreferences/training.md.- [INDIRECT_PROMPT_INJECTION]: The skill processes large text datasets from external sources, which is a standard attack surface for language model training where malicious instructions could be embedded in the training corpus. 1. Ingestion points: Dataset downloads from GitHub and HuggingFace integration inreferences/data.md. 2. Boundary markers: Not present. 3. Capability inventory: File system writes (.bin,.pkl), network requests for data retrieval, and GPU-accelerated code execution. 4. Sanitization: No sanitization is applied to the raw training text.- [COMMAND_EXECUTION]: The skill provides detailed shell commands for environment setup, data preparation, and distributed model training. Evidence: Instructions forpip install,python prepare.py, andtorchrunare provided inSKILL.mdandreferences/training.md.
Audit Metadata