fine-tuning-expert
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The documentation in
references/deployment-optimization.mdincludes Python functions that utilize thesubprocessmodule to execute external binaries and scripts. Specifically, theexport_to_gguffunction calls thellama-quantizetool and a conversion script from a path determined by theLLAMA_CPP_PATHenvironment variable. While typical for model quantization workflows, this involves system-level command execution. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting and processing external datasets (JSONL, Parquet) for model training, which presents a surface for indirect prompt injection. Mandatory Evidence Chain:
- Ingestion points: Dataset loading logic in
SKILL.mdandreferences/dataset-preparation.md. - Boundary markers: The skill does not provide specific instructions or delimiters to isolate embedded commands in training data.
- Capability inventory: The skill has the ability to execute shell commands via
subprocess.runand perform network operations viatransformersandopenailibraries. - Sanitization: Basic quality filters in
references/dataset-preparation.mdsearch for and remove common AI refusal patterns. - [EXTERNAL_DOWNLOADS]: The skill uses standard libraries to download pre-trained model weights, tokenizers, and datasets from the Hugging Face Hub. It also supports evaluation using the OpenAI API. These operations are essential for the skill's stated purpose of model fine-tuning.
Audit Metadata