model-merging

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the mergekit toolkit from its official GitHub repository and fetches machine learning libraries from standard package registries.
  • [COMMAND_EXECUTION]: Instructs the agent to execute shell commands for repository cloning, environment configuration, and model merging operations via CLI tools.
  • [DYNAMIC_EXECUTION]: Programmatically generates configuration files at runtime which are subsequently used as parameters for external subprocess execution during the merging process.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied evaluation prompts to generate model responses for consistency-based coefficient selection.
  • Ingestion points: Evaluation prompt arrays consumed by inference functions in the coefficient tuning reference file.
  • Boundary markers: No specific delimiters or boundary markers are used when interpolating external prompts into model context.
  • Capability inventory: Includes model inference capabilities and shell execution access for the merge toolkit.
  • Sanitization: No input validation or content filtering is performed on the evaluation prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 04:15 AM