transformers
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection by processing external inputs through various transformer models.
- Ingestion points: The skill processes text, images, and audio through
pipeline()calls inSKILL.mdandreferences/pipelines.md, as well as dataset mapping inreferences/training.md. - Boundary markers: The instructions do not specify any delimiters or warnings to the model to ignore instructions embedded in the processed data.
- Capability inventory: The skill utilizes subprocesses for package installation (
uv pip installinSKILL.md), writes to the local filesystem (save_pretrainedinreferences/models.md), and performs network operations (push_to_hubinreferences/models.md). - Sanitization: There is no evidence of input sanitization or filtering before passing data to the models.
- [COMMAND_EXECUTION]: The skill provides instructions for installing necessary Python dependencies using the
uvpackage manager inSKILL.md. These commands are standard for setting up the environment required for the Transformers library and its related machine learning tasks. - [EXTERNAL_DOWNLOADS]: The skill fetches pre-trained models, datasets, and evaluation scripts from the Hugging Face Hub (
huggingface.co). These downloads are performed using the library's official APIs and target a well-known service in the machine learning community.
Audit Metadata