nnunet-segmentation
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill provides instructions for the user to append environment variable exports to shell configuration files such as ~/.bashrc or ~/.zshrc. This is a standard method for ensuring tool configuration persists across user sessions.
- [DYNAMIC_EXECUTION]: The framework utilizes .pkl (pickle) files for storing post-processing configurations. Deserialization of pickle files is a known vector for dynamic code execution; however, in this context, the files are typically generated locally by the tool's own processes during training and evaluation.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing external datasets and metadata files. 1. Ingestion points: Dataset descriptor files (dataset.json) and image volume files (NIfTI format). 2. Boundary markers: None identified in the provided instructions. 3. Capability inventory: Execution of nnU-Net CLI tools, file system writes via Python scripts, and network operations via package installation and external research data references. 4. Sanitization: No specific sanitization of external metadata is shown before it is used to configure training and preprocessing.
Audit Metadata