pytorch-model-trainer
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized commands were detected. The skill uses standard platform configurations to restrict tool access to a safe subset of capabilities required for its stated purpose.
- [NO_CODE]: The skill consists entirely of markdown documentation and metadata; it does not include any executable scripts, binaries, or active code components.
- [INDIRECT_PROMPT_INJECTION]: The skill defines tasks for machine learning data preparation, which inherently creates a surface for indirect prompt injection. This is noted as a standard architectural characteristic of data-processing skills.
- Ingestion points: The skill processes user requests and datasets for model training as specified in the
SKILL.mdtriggers and description. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are included in the skill body.
- Capability inventory: The skill utilizes file operations (Read, Write, Edit) and scoped bash execution (python, pip).
- Sanitization: The skill does not define explicit validation or sanitization logic for external content.
Audit Metadata