predictingthepast
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/run_inference.pydownloads large binary model checkpoints (e.g.,aeneas_117149994_2.pkl) and datasets from a Google-managed Cloud Storage bucket (https://storage.googleapis.com/ithaca-resources/models). These resources are essential for the skill's stated purpose and originate from a trusted organization. - [REMOTE_CODE_EXECUTION]: The skill uses
pickle.load()inscripts/run_inference.pyto deserialize model parameters and configurations. Whilepickleis inherently unsafe for untrusted data, in this context, it is used to load official artifacts from the vendor's own verified infrastructure. - [COMMAND_EXECUTION]: The skill instructs the agent to launch a local background HTTP server using
python -m http.serverto serve analysis dashboards. The configuration uses--bind 0.0.0.0, which makes the dashboard directory accessible to other devices on the same local network.
Audit Metadata