codonfm-finetune
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from user-supplied CSV files and remote datasets to prepare training inputs for bio-foundation models.
- Ingestion points: Data is read from user-provided file paths via the
--data_pathargument and from a remote TSV file inscripts/prepare_ribonn.py. - Boundary markers: Instructions do not define specific delimiters or warnings to prevent the agent from following natural language instructions potentially embedded within the CSV data columns.
- Capability inventory: The skill executes Python scripts for data processing (
prepare_ribonn.py) and model training (src.runner), both of which perform file system operations. - Sanitization: The
prepare_ribonn.pyscript performs sequence validation (ACGT character check) and basic type/finite-value checks on labels. - [EXTERNAL_DOWNLOADS]: The data preparation script fetches a human translation-efficiency dataset from a public GitHub repository for demonstration purposes. This download targets a well-known service and is pinned to a specific commit hash for integrity.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands to run Python scripts for dataset preparation and fine-tuning tasks using the
src.runnermodule.
Audit Metadata