timesfm-forecasting

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/check_system.py script utilizes the subprocess module to execute system utility commands such as sysctl and vm_stat on macOS. This behavior is benign, as the outputs are used solely to calculate available physical memory and prevent the agent from overloading the user's system.
  • [EXTERNAL_DOWNLOADS]: The skill is configured to download model weights (safetensors) from HuggingFace repositories under the official Google organization (e.g., google/timesfm-2.5-200m-pytorch). These downloads are expected for the skill's primary purpose of time series forecasting and target a well-known service.
  • [COMMAND_EXECUTION]: The system checker script uses importlib.import_module to verify the presence and version of necessary Python libraries (torch and timesfm). This is a standard and safe implementation for runtime dependency verification.
  • [COMMAND_EXECUTION]: The script scripts/check_system.py uses ctypes on Windows systems to call GlobalMemoryStatusEx within kernel32.dll. This is a legitimate method for retrieving system hardware statistics and does not pose a security risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 10:50 PM