blip-2-vision-language
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download model weights and configuration from Hugging Face (Salesforce/blip2-*), which is a trusted and well-known service for machine learning assets.
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted image and text inputs in
SKILL.mdandreferences/advanced-usage.md. While it lacks explicit sanitization or boundary markers, its capabilities are confined to model inference and text generation, posing no risk of executing unauthorized commands or exfiltrating data. - [COMMAND_EXECUTION]: The documentation includes standard pip installation commands for verified Python packages like transformers and torch, which is routine for this type of technical content.
Audit Metadata