pytorch-lightning
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of well-known and widely used machine learning packages from official registries (PyPI), including
lightning,wandb,mlflow,comet-ml, anddeepspeed. These references are standard for the intended use case of neural network training. - [INDIRECT_PROMPT_INJECTION]: The skill provides
LightningDataModuletemplates designed to ingest external data for machine learning tasks. This represents a potential vulnerability surface where malicious instructions could be embedded in datasets and executed by an agent. - Ingestion points: Data enters the system through the
prepare_dataandsetupmethods defined inreferences/data_module.mdandscripts/template_datamodule.py. - Boundary markers: The provided boilerplate code does not include specific boundary markers or instructions to the agent to disregard natural language commands found within the data.
- Capability inventory: The skill possesses
Bash,Write,Read, andEditcapabilities, which could be exploited if the agent is influenced by malicious data content to perform unauthorized file or system operations. - Sanitization: The templates lack explicit input validation or sanitization logic to filter out potentially harmful content from the ingested datasets.
Audit Metadata