gguf-quantization
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to clone the
llama.cpprepository from the official GGML organization on GitHub for local building and execution. - [COMMAND_EXECUTION]: Instructions include standard software development workflows such as compiling C++ source code using
make, installing Python packages viapip, and managing models using command-line tools likehuggingface-cliandollama. - [DYNAMIC_EXECUTION]: One of the advanced usage examples includes a Python snippet that utilizes
subprocess.runto callnvidia-smi. This is used legitimately to query system VRAM and calculate the optimal number of model layers to offload to the GPU. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external model files from HuggingFace and process user-provided calibration text for creating importance matrices. While these are external data ingestion points, they represent standard model optimization surfaces and the skill follows established safety patterns for these workflows.
Audit Metadata