tao-run-automl
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies extensively on shell command execution to manage Docker containers, verify GPU status via
nvidia-smi, and orchestrate the AutoML stages through thedriver.shharness. It usesdocker runwith host mounts to execute training and evaluation tasks. - [DYNAMIC_EXECUTION]: The workflow generates Python scripts (e.g.,
driver.pyincards/20-launch-recs.md) and executes them at runtime using the host Python interpreter. It also uses shell heredocs to execute Python blocks for result interpretation and session management. - [INDIRECT_PROMPT_INJECTION]: The skill processes external model skills, search-space schemas, and dataset manifests which could contain malicious instructions. The
autoresearchalgorithm also utilizes an LLM to propose modifications to hyperparameters based on experiment history. - Ingestion points:
skills/models/<network>/SKILL.md,schemas/*.schema.json, and dataset media/annotation paths. - Boundary markers:
AutoMLRunnerincorporates internal validation;validate_session_settingsensures session identity durability. - Capability inventory: Docker job submission, file system writes for artifacts, and network operations through platform SDKs.
- Sanitization: The
AutoMLRunnersanitizes feedback provided to LLM brains; search parameters are validated against packaged dataclass schemas before execution. - [EXTERNAL_DOWNLOADS]: The skill performs package installations using
pipby resolving versions through a local script (resolve_versions_key.py) and downloads datasets from S3 buckets as part of the evaluation and training processes. These operations target vendor-controlled and trusted resources.
Audit Metadata