thinker-model-pack-validation
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute specific local command-line utilities including
tpackerandtvalidatorfor model optimization and consistency checks. It also performs shell commands to verify the environment, such as checking tool versions and usinggitto verify the state of the local repository. - [DYNAMIC_EXECUTION]: The skill utilizes
cmaketo compile target platform simulation libraries during the validation phase if they are not pre-built. It also executes dynamic Python code viapython -cto inspect the versions of installed dependencies likelingerandpythinker. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data in the form of quantised ONNX models and NPY input files. While these are binary formats, they serve as a primary ingestion surface. The skill mitigates risks by requiring an initial validation step using
onnx.checker.check_modelto verify graph integrity before proceeding with deployment tasks.
Audit Metadata