contrib-op-shape-inference-memory-safety
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Memory Safety Audit Guidance]: The skill provides detailed instructions on how to detect and remediate out-of-bounds (OOB) memory access patterns in C++ code. This is a defensive security practice aimed at hardening the ONNX Runtime codebase.
- [Developer Command Execution]: The instructions include standard shell commands for code auditing (
git grep) and building/testing the project (cmake,python3 tools/ci_build/build.py). These commands are intended for local developer environments to verify security fixes. - [Testing and Validation Procedures]: The skill describes how to use AddressSanitizer (ASan) to validate that memory safety issues are resolved. This is a standard and recommended practice for security-conscious software development.
- [Contextual Alignment]: The content is consistent with the established development workflows and coding standards of the Microsoft ONNX Runtime repository. All references to file paths, PRs, and tools are relevant to the project's maintenance and security posture.
Audit Metadata