huggingface-llm-trainer
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads training scripts and configuration files from official sources including the Hugging Face Hub and the TRL GitHub repository. It also clones the
llama.cpprepository from GitHub to facilitate model conversion. - [COMMAND_EXECUTION]: The script
scripts/convert_to_gguf.pyusessubprocess.runto execute system-level commands for installing build tools (via apt-get), cloning repositories (via git), building binaries (via cmake), and installing Python packages (via pip). - [DYNAMIC_EXECUTION]: The core functionality of the skill involves the agent generating Python code and executing it in a remote environment using the
hf_jobstool. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Untrusted data enters the agent's context through
load_datasetcalls in the training script templates (e.g.,scripts/train_sft_example.py). - Boundary markers: The skill does not explicitly use delimiters or boundary instructions to isolate potentially malicious content within processed datasets.
- Capability inventory: The skill possesses capabilities including command execution, network communication for model uploading, and file system access for saving model weights.
- Sanitization: While the skill provides a
dataset_inspector.pytool to preview dataset formats, it does not implement automated sanitization or filtering of the dataset content itself.
Audit Metadata