ultralytics-platform
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, such as model archives and datasets, which could contain adversarial instructions designed to influence the agent's behavior.
- Ingestion points: Dataset retrieval and ingest functions (
client.datasets.retrieveandclient.datasets.ingestinreferences/recipes.md) which process data from local archives or remote URLs. - Boundary markers: The instructions do not specify the use of delimiters or clear directives to ignore instructions embedded within the processed data.
- Capability inventory: The skill has capabilities for network operations (
httpx.put), cloud resource creation (client.training.start,client.exports.create), and model deployment. - Sanitization: There is no explicit evidence of content sanitization or validation for datasets retrieved from the platform or remote sources.
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing the
ultralytics-platformandultralyticsPython packages. These are official packages used to interact with the Ultralytics ecosystem and platform services. - [COMMAND_EXECUTION]: Provides instructions for using the
yoloCLI for authentication (yolo login) and model training (yolo train). These are standard operational commands for the supported library.
Audit Metadata