nanogpt
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the TinyShakespeare dataset from Andrej Karpathy's official GitHub repository (
raw.githubusercontent.com/karpathy/char-rnn/master/data/tinyshakespeare/input.txt). This is a well-known educational dataset and the source is considered safe for this context. - [EXTERNAL_DOWNLOADS]: The data preparation workflows for OpenWebText utilize the HuggingFace
datasetslibrary to fetch theopenwebtextdataset. HuggingFace is a trusted organization for machine learning assets. - [COMMAND_EXECUTION]: The documentation provides standard training commands such as
python train.py,torchrun, andpip install. These commands are expected for a machine learning development skill and do not incorporate unvalidated external input. - [REMOTE_CODE_EXECUTION]: While the skill mentions loading weights using
GPT2LMHeadModel.from_pretrained('gpt2'), this is the standard mechanism for fetching public model checkpoints from HuggingFace, which is an established and safe practice in the ML community. - [SAFE]: The skill implements integrity rules that prioritize transparency regarding compute costs and result validation, which is a security best practice for autonomous agents.
Audit Metadata