fine-tuning-expert
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto invoke external scripts for model conversion and quantization inreferences/deployment-optimization.md. - The paths for
convert_hf_to_gguf.pyandllama-quantizeare constructed dynamically from theLLAMA_CPP_PATHenvironment variable. - [PROMPT_INJECTION]: The skill is designed to process untrusted training data, which introduces an indirect prompt injection surface.
- Ingestion points: Training datasets are loaded in
references/dataset-preparation.mdusingload_custom_dataset. - Boundary markers: The code lacks specific boundary markers or instructions for the agent to disregard potential injection attempts within the instruction and output fields of the processed datasets.
- Capability inventory: The skill has capabilities for file writing (
save_pretrained), network communication (Hugging Face API), and command execution (subprocess.run). - Sanitization: Validation scripts focus on format and data quality metrics (e.g., token length, deduplication) rather than sanitizing for malicious prompt content.
- [EXTERNAL_DOWNLOADS]: The skill interacts with Hugging Face to download pre-trained models and datasets, which is standard behavior for the
transformersanddatasetslibraries.
Audit Metadata