trl-training
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads pre-trained models and datasets from Hugging Face Hub, which is a well-known and trusted service. Examples include the Qwen model family and the Capybara dataset.
- [COMMAND_EXECUTION]: Provides instructions for running the
trlandacceleratecommand-line tools to execute model training and serving workflows. - [DYNAMIC_EXECUTION]: The skill utilizes user-defined Python functions, such as reward functions in the GRPOTrainer, which are executed locally during the reinforcement learning loop.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Hugging Face repositories for model training, creating a potential surface for instructions embedded in training data.
- Ingestion points: External datasets are loaded via
load_datasetcalls inSKILL.md. - Boundary markers: The instructions do not specify delimiters or constraints for the content of the training datasets.
- Capability inventory: The workflow involves shell command execution via the
trlCLI and model training subprocesses. - Sanitization: No explicit validation or filtering of the dataset content is described.
Audit Metadata