skills/lebsral/dspy-programming-not-prompting-lms-skills/dspy-bootstrap-finetune/Gen Agent Trust Hub
dspy-bootstrap-finetune
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the ingestion of large datasets for model training and fine-tuning, which presents a surface for indirect prompt injection if the source data is untrusted.
- Ingestion points: Training data enters the agent context via the
trainsetvariable inSKILL.mdand by loading external files such asreviews_labeled.jsonandsupport_messages_labeled.jsoninexamples.md. - Boundary markers: The provided code snippets do not demonstrate the use of explicit delimiters or instructions to the model to ignore embedded commands within the training examples.
- Capability inventory: The skill utilizes the
dspylibrary, which performs network operations to interface with LLM provider APIs (OpenAI, Together AI) and includes functionality to write and read local JSON files for model configuration (.save()and.load()). - Sanitization: No explicit validation or sanitization of the input data strings is present in the examples provided.
Audit Metadata