tao-train-grounding-dino
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of pre-trained text encoder weights (bert-base-uncased) from the HuggingFace Hub. This is a standard and expected operation required for the Grounding DINO architecture.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection through its ingestion of untrusted datasets and text captions.
- Ingestion points: Dataset annotation files (ODVG/COCO format) and text prompts for open-vocabulary inference specified in
SKILL.mdandreferences/skill_info.yaml. - Boundary markers: Absent in the provided configuration templates.
- Capability inventory: The skill uses the
Bashtool to execute TAO CLI commands and Docker runs for model processing, as documented inreferences/tao-deploy-grounding-dino.md. - Sanitization: Relies on the underlying TAO Toolkit logic and BERT tokenizer to process data safely.
- [COMMAND_EXECUTION]: The skill generates and provides shell commands for training, quantization, and deployment via the TAO CLI and Docker. These commands are consistent with the skill's stated purpose and do not attempt to access sensitive system areas or escalate privileges.
Audit Metadata