nanogpt
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Tiny Shakespeare dataset from a public repository on GitHub (
raw.githubusercontent.com/karpathy/char-rnn/master/data/tinyshakespeare/input.txt) using therequestslibrary withinreferences/data.md. This is used to provide training data for the educational examples. - [EXTERNAL_DOWNLOADS]: The data preparation scripts in
references/data.mdandreferences/training.mdutilize the HuggingFacedatasetslibrary to load theopenwebtextandwikipediadatasets, which are standard resources in the machine learning community. - [DYNAMIC_EXECUTION]: The training logic in
references/training.mdemploystorch.compile(model), a PyTorch 2.0 feature that performs runtime optimization of the model graph. This is a performance-enhancing feature and does not involve executing untrusted code or scripts from external sources. - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data, as it is designed to train models on custom user-provided text files or external web datasets. However, since the data is converted into numerical tokens for tensor-based training, the risk of instruction override or execution is minimal in this context.
Audit Metadata