tilegym-improve-cutile-kernel-perf

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation describes installing the cuda-tile package. This is a vendor-provided dependency required for the performance analysis workflow.
  • [COMMAND_EXECUTION]: The skill requires the execution of shell commands such as git, python, tileiras, and cuobjdump. These are utilized for version control, running benchmarks, and inspecting compiler intermediate representation (IR) as part of the intended optimization process.
  • [DATA_EXFILTRATION]: Analysis confirmed that data access is restricted to the local workspace and temporary directories (/tmp/). No network exfiltration patterns were detected.
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes and executes user-provided kernel code (Ingestion: src/tilegym/suites/.../cutile/, Capability: python -m pytest, tileiras). However, this behavior is central to the skill's primary function and no malicious patterns were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 07:26 AM
Security Audit — agent-trust-hub — tilegym-improve-cutile-kernel-perf