nanogpt

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the TinyShakespeare dataset from Andrej Karpathy's official GitHub repository (raw.githubusercontent.com/karpathy/char-rnn/master/data/tinyshakespeare/input.txt). This is a well-known educational dataset and the source is considered safe for this context.
  • [EXTERNAL_DOWNLOADS]: The data preparation workflows for OpenWebText utilize the HuggingFace datasets library to fetch the openwebtext dataset. HuggingFace is a trusted organization for machine learning assets.
  • [COMMAND_EXECUTION]: The documentation provides standard training commands such as python train.py, torchrun, and pip install. These commands are expected for a machine learning development skill and do not incorporate unvalidated external input.
  • [REMOTE_CODE_EXECUTION]: While the skill mentions loading weights using GPT2LMHeadModel.from_pretrained('gpt2'), this is the standard mechanism for fetching public model checkpoints from HuggingFace, which is an established and safe practice in the ML community.
  • [SAFE]: The skill implements integrity rules that prioritize transparency regarding compute costs and result validation, which is a security best practice for autonomous agents.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 04:15 AM