fine-tuning-with-trl
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external datasets for model training, which represents a potential attack surface for indirect prompt injection if the source data contains adversarial instructions.
- Ingestion points: The skill uses
load_dataset()to fetch data from Hugging Face Hub repositories such astrl-lib/Capybara,trl-lib/ultrafeedback_binarized, andtrl-lib/tldr(seen inSKILL.mdand reference files). - Boundary markers: No explicit instruction delimiters or boundary markers are suggested for the training data processing.
- Capability inventory: The training scripts perform file system writes (
trainer.save_model()), network operations to fetch models/datasets, and intensive GPU computation. - Sanitization: The skill relies on standard dataset loading via the Hugging Face
datasetslibrary; no specific sanitization or filtering logic is implemented. - [EXTERNAL_DOWNLOADS]: The skill downloads machine learning models, datasets, and configuration files from Hugging Face (
huggingface.co) and GitHub. These are recognized as well-known and established services for hostsing AI research and development resources.
Audit Metadata