tao-prepare-anomalygennext-inputs
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/run_anomalygennext_amp.pyusessubprocess.runto launch theanomalygen.scripts.auto_mask_placement.roi_placemodule. The execution uses a list format (preventing shell injection) and takes parameters likemodel_idfrom the подготовке configuration file. This is a standard pattern for multi-step AI processing pipelines. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Parquet files and YAML configurations, which define file paths, anomaly types, and model parameters. While this introduces an indirect injection surface, the scripts include extensive validation logic for mask contents, image dimensions, and bounding box integrity to mitigate malformed data risks.
- [DYNAMIC_EXECUTION]: The test suite (
scripts/tests/) usesimportlib.utilto dynamically load and execute the skill's scripts for verification purposes. Additionally, therun_ampaction dynamically constructs command-line arguments to invoke internal Python modules. - [EXTERNAL_DOWNLOADS]: The skill references models from Hugging Face (
nvidia/Cosmos3-Nano,Qwen/Qwen3-VL-8B-Instruct). However, therun_ampscript explicitly setsHF_HUB_OFFLINE="1"andTRANSFORMERS_OFFLINE="1", ensuring the skill operates on local assets rather than performing runtime downloads from the public internet.
Audit Metadata