pyvene-interventions
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the
pyvenepackage from the official Python Package Index. It also provides examples for loading pre-trained intervention configurations from HuggingFace Hub (e.g.,zhengxuanzenwu/intervenable_honest_llama2_chat_7B), which is a well-known service for sharing machine learning artifacts. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process user-defined text prompts to analyze internal model activations.
- Ingestion points: Text prompts are ingested via the
tokenizerand passed to theIntervenableModelclass inSKILL.mdandreferences/tutorials.md. - Boundary markers: None are present in the provided code snippets, as the skill focuses on research-oriented activation patching.
- Capability inventory: The skill's scripts are restricted to model inference and tensor manipulation using
torchandpyvene; no capabilities for file-system modification or network exfiltration are requested or utilized. - Sanitization: Input text is processed through standard transformer tokenization prior to model ingestion.
- [SAFE]: All instructions and scripts are consistent with the stated purpose of providing documentation for the Stanford NLP
pyvenelibrary. External links point to official documentation, academic papers on arXiv, and the project's official GitHub repository.
Audit Metadata