pytorch
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes
torch.compile(PyTorch 2.0+) which generates and compiles GPU kernels at runtime to optimize model performance. It also covers model deserialization usingtorch.loadandtorch.jit, identifying the risk of arbitrary code execution and recommending the use ofweights_only=True. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection. 1. Ingestion points:
CustomDatasetinSKILL.mdallows for arbitrary data processing. 2. Boundary markers: No explicit markers are provided to delimit external data from agent instructions. 3. Capability inventory: Includes dynamic code generation viatorch.compileand file system writes viatorch.saveandtorch.cuda.memory._dump_snapshot. 4. Sanitization: No input validation or sanitization is implemented for the data loaders.
Audit Metadata