timesfm-forecasting
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/check_system.pyscript utilizes thesubprocessmodule to execute system utility commands such assysctlandvm_staton macOS. This behavior is benign, as the outputs are used solely to calculate available physical memory and prevent the agent from overloading the user's system. - [EXTERNAL_DOWNLOADS]: The skill is configured to download model weights (safetensors) from HuggingFace repositories under the official Google organization (e.g.,
google/timesfm-2.5-200m-pytorch). These downloads are expected for the skill's primary purpose of time series forecasting and target a well-known service. - [COMMAND_EXECUTION]: The system checker script uses
importlib.import_moduleto verify the presence and version of necessary Python libraries (torchandtimesfm). This is a standard and safe implementation for runtime dependency verification. - [COMMAND_EXECUTION]: The script
scripts/check_system.pyusesctypeson Windows systems to callGlobalMemoryStatusExwithinkernel32.dll. This is a legitimate method for retrieving system hardware statistics and does not pose a security risk in this context.
Audit Metadata