vastai-performance-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external data including provider output, manifests, and configuration files, which presents a surface for indirect prompt injection if the source data is compromised or malicious.
- Ingestion points: The skill reads manifests, provider output, and configuration files during the benchmarking and tuning process (found in SKILL.md instructions).
- Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted external data from the agent's internal instructions.
- Capability inventory: The agent is configured with
Read,Grep,Write, andEdittools, allowing it to modify files based on the data it processes. - Sanitization: The instructions do not specify any validation, filtering, or sanitization steps for the data ingested from external manifests or provider outputs.
Audit Metadata