import-model
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto execute local helper scripts, formatting tools likeruff, and test suites. For example,scripts/scaffold.pyinvokesruffto format generated code, andscripts/test_scripts.pyruns various scripts in subprocesses to verify end-to-end functionality within the development environment. - [DYNAMIC_EXECUTION]: The skill employs dynamic code execution to facilitate testing and modular loading of generated code.
scripts/test_scripts.pyusesexec()andcompile()to validate the behavior of rendered configuration classes. Additionally,scripts/check_port.pyusesimportlib.import_moduleto dynamically load the newly scaffolded architecture package for parameter validation against model checkpoints. - [EXTERNAL_DOWNLOADS]: The skill connects to the Hugging Face Hub (
huggingface.co) to download model configurations, safetensors metadata, and weight files. These operations target a well-known, trusted service and are essential for the model import and inspection workflow. The skill also utilizes thetrust_remote_code=Truefeature in thetransformerslibrary, which is a known high-capability requirement for this domain that is appropriately documented in the skill's safety guidelines. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect injection surface by ingesting untrusted model configurations and cards from Hugging Face. While malicious data in these sources could theoretically attempt to influence the code generation process, the skill mitigates this by using AST-based generation (
ast.unparse) rather than simple string templates for sensitive code sections.
Audit Metadata