paidf-anomalygen
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data through ingestion points such as the
defect_spec.jsonlfile and thedataset_dirdirectory. This content is interpolated into internal logic to define anomaly types and spatial dependencies. The skill lacks explicit boundary markers or sanitization to prevent adversarial instructions within user-controlled fields likeroi_prompt_defect_location. The agent context maintains high capabilities, including file system writes and subprocess execution of training and generation scripts.- [COMMAND_EXECUTION]: The pipeline is managed through the execution of several shell scripts and Python modules, includinglaunch_training.shfor Phase 1,run_sdg.shfor Phase 3, andrun_eval.shfor Phase 4. These scripts handle model training, synthetic image generation, and quality evaluation.- [EXTERNAL_DOWNLOADS]: The skill downloads approximately 140 GB of model weights and datasets from well-known services and vendor-owned repositories. Targets include official Hugging Face repositories for Cosmos models and theabin24/Magnetic-tile-defect-datasetsrepository on GitHub.- [PRIVILEGE_ESCALATION]: The documentation includes instructions for users to usesudo chownorsudo chmod 777on host directories to address permission issues arising from the container's use of a specific internal UID (10000).
Audit Metadata