axolotl
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes patterns for executing system-level commands to facilitate training and benchmarking. Examples include the
run_cmdfunction for Modal Cloud, the execution of NCCL performance tests (./build/all_reduce_perf), and the use of launchers liketorchrunandaccelerateto start training jobs. - [EXTERNAL_DOWNLOADS]: The framework allows for syncing resources and configuration from remote sources. Specifically, the
cli.utils.fetch.fetch_from_githubfunction downloads files from GitHub repositories, andcli.config.check_remote_configfetches and parses configuration files from HTTPS URLs. - [DYNAMIC_EXECUTION]: The skill utilizes dynamic loading to support a wide range of model architectures and user-defined extensions. This is evidenced by the
PluginManagerwhich loads classes based on module strings and themonkeypatch.lora_kernels.get_attention_cls_from_configfunction which uses dynamic imports. - [INDIRECT_PROMPT_INJECTION]: As a tool for training on external data, the skill possesses an attack surface for indirect prompt injection via untrusted datasets. However, it provides robust documentation on mitigation strategies, including the use of Jinja2 chat templates, turn delimiters, and sequence masking with specific labels (e.g., -100) to ensure the model distinguishes between instructions and data.
Audit Metadata