model-quantization
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill implementation patterns include the use of
subprocess.runto execute quantization binaries and conversion scripts. This functionality is essential for model optimization and is accompanied by examples of secure execution practices, such as environment isolation and path validation. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates that ingest external model data and prompts, which represents an attack surface for indirect prompt injection.
- Ingestion points: External model files (
.gguf,.bin) and test prompt strings are processed by the quantizer and benchmark tools as shown inSKILL.mdandreferences/advanced-patterns.md. - Boundary markers: Not explicitly defined in the provided code snippets for LLM-based processing.
- Capability inventory: Utilizes
subprocess.runto execute system binaries (quantize) and scripts (convert_hf_to_gguf.py) and uses thellama-cpp-pythonlibrary for inference. - Sanitization: The skill mitigates risks by including mandatory integrity verification via a
ModelVerifierclass (SHA256) and rigorous path validation viavalidate_model_pathto prevent directory traversal attacks.
Audit Metadata