pufferlib
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide and template library for PufferLib, a known reinforcement learning framework. All scripts provided are standard Python implementations for RL tasks, including environment logic (scripts/env_template.py) and training loops (scripts/train_template.py).
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the 'pufferlib' package via standard package managers (uv pip install pufferlib). The source code and documentation links point to official project resources on GitHub and puffer.ai, which are consistent with the framework's branding.
- [COMMAND_EXECUTION]: The training scripts use standard library calls and CLI arguments for specifying hardware devices (cuda/cpu) and distributed training (torchrun). These are standard practices in the machine learning ecosystem and do not constitute malicious privilege escalation or unauthorized command execution.
- [DYNAMIC_EXECUTION]: References to 'torch.compile' and C-extension examples for environment optimization are standard techniques for improving performance in reinforcement learning and do not involve unsafe dynamic loading of untrusted content.
- [CREDENTIALS_SAFE]: While the skill mentions API tokens for logging services like Neptune, it correctly uses placeholders ('YOUR_TOKEN') and command-line arguments, encouraging safe secret management rather than hardcoding credentials.
Audit Metadata