hqq-quantization
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the
hqqlibrary and optimized backends likebitblasandtorchaofrom PyPI. It also includes instructions for downloading models from HuggingFace repositories (e.g.,meta-llama,mobiuslabsgmbh), which is standard for model quantization tasks. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a structural vulnerability surface common to LLM-based tools.
- Ingestion points: External model weights and configurations (
AutoModelForCausalLM.from_pretrained) and user-supplied prompts (tokenizer). - Boundary markers: None explicitly defined in the provided code snippets.
- Capability inventory: File system writing (
model.save_pretrained) and network reading (HuggingFace API access). - Sanitization: Relies on standard tokenization; no extra validation of inputs or model metadata is described.
- [DYNAMIC_EXECUTION]: The skill uses
torch.compileand dynamic layer replacement to optimize model performance. These are legitimate and standard practices within the PyTorch ecosystem for improving inference efficiency.
Audit Metadata