tao-train-sparse4d
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEPROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: Documentation in
BENCHMARK.mdandskill-card.mdcontains self-referential safety claims such as "Security: 100%" and "Overall verdict: PASS". These statements are designed to target security analyzers to influence the final risk assessment. - [REMOTE_CODE_EXECUTION]: The skill processes annotation and metadata files in the Python pickle (
.pkl) format during model training and evaluation. Since these files are supplied by external datasets, the underlying use ofpickle.loadfor deserialization represents a potential dynamic execution vulnerability surface. - [COMMAND_EXECUTION]: The skill automates complex machine learning workflows through the execution of
sparse4dandannotationsCLI tools, which operate on local file systems and system hardware. - [EXTERNAL_DOWNLOADS]: Integration with the Weights & Biases (
wandb) platform is included for experiment tracking. This involves network connections to an established external service for data logging and visualization.
Audit Metadata