axolotl
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation describes functionality for the
axolotl fetchcommand and thecheck_remote_configutility, which are designed to download configuration files from remote HTTPS URLs and synchronize repository contents from the framework's official GitHub repository. - [DYNAMIC_EXECUTION]: The skill details Axolotl's plugin system, which involves dynamically importing and instantiating Python classes at runtime. It also documents the use of monkey-patching for applying optimizations like Flash Attention and Triton kernels to models during the loading and training process.
- [INDIRECT_PROMPT_INJECTION]: The skill documents the processing of external datasets (e.g., JSONL, Parquet, and CSV) for fine-tuning, which represents an ingestion surface for untrusted data. * Ingestion points: Dataset loading utilities described in
api.md, such asload_datasetsandload_preference_datasets. * Boundary markers: The documentation describes the use of chat templates and delimiters (such as<|im_start|>and<|im_end|>) to separate conversation turns. * Capability inventory: Training (do_train), inference (do_inference), and model serving (do_vllm_serve) capabilities. * Sanitization: Not explicitly defined, though the skill outlines standard data preparation workflows using Hugging Face's datasets library.
Audit Metadata