hf-cloud-serving-image-selection
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Command Execution]: The
scripts/mirror_image.pyscript utilizes thesubprocessmodule to executeawsanddockercommands. The implementation follows security best practices by passing arguments as lists and avoiding the use ofshell=True, which significantly reduces the risk of shell injection. - [External Content Access]: The skill fetches container image information and model configurations from official AWS and Hugging Face repositories. These are well-known, trusted sources necessary for determining deployment compatibility and mirroring images to private registries.
- [Indirect Prompt Injection Surface]: The workflow involves querying
config.jsonfiles from the Hugging Face Hub to identify model architectures. While this represents an ingestion of external data, the content is sourced from a trusted platform and used to inform manual or scripted deployment decisions, presenting a minimal security consideration.
Audit Metadata