llamaguard
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and implementation examples for LlamaGuard, a specialized content moderation model from Meta. All external resources, including model weights accessed via HuggingFace and dependencies like
transformers,torch, andvllm, are sourced from well-known technology organizations and official registries. - [INDIRECT_PROMPT_INJECTION]: Untrusted user data is ingested through the
moderate,check_input, andcheck_outputfunctions defined inSKILL.md. The implementation utilizes thetokenizer.apply_chat_templatemethod to establish structural boundary markers for this content. An inventory of the code confirms a lack of dangerous capabilities such as subprocess calls, arbitrary execution (eval/exec), or unauthorized network exfiltration. The skill is specifically designed to identify and filter malicious content, acting as a defensive layer against prompt injection attacks.
Audit Metadata