tao-finetune-anomalygennext
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external user-supplied datasets and validation files which enter the agent's context during the training preparation phase.\n- Ingestion points:
scripts/prepare_finetune_recipe.pyandscripts/validate_nn_improvement.pyread user-provided JSONL and CSV files.\n- Boundary markers: The skill does not use explicit delimiters in prompts but enforces strict structural validation on all ingested data.\n- Capability inventory: The skill can write configuration files (recipes) and execute shell commands viascripts/finetune_anomalygennext.sh.\n- Sanitization: Implements robust regex validation (SAFE_NAME) for dataset and job names, strictly whitelists image extensions to supported formats (.jpg, .jpeg, .png), and verifies mask integrity by ensuring pixel values are exactly 0 and 255.\n- [COMMAND_EXECUTION]: The skill executes training workloads and validation logic using shell commands. This includes the use oftorchrunand Python-based validation scripts. Test scripts (scripts/tests/) appropriately usesubprocess.runfor functional verification in a controlled environment.
Audit Metadata