hqq-quantization
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install various Python packages from standard registries, including
hqq,torch,transformers,vllm,bitblas, andtorchao. It also includes instructions for downloading datasets from HuggingFace via thedatasetslibrary for perplexity measurement. - [COMMAND_EXECUTION]: The troubleshooting and installation sections reference system commands such as
nvidia-smiandnvcc --versionto verify hardware capabilities and driver versions. It also includes standard package management commands likepip install. - [DYNAMIC_EXECUTION]: The skill demonstrates the use of
torch.compilefor model optimization. It also showcases dynamic modification of model layers using Python'ssetattrto replace standard linear layers with quantizedHQQLinearversions, which is a standard procedure in quantization frameworks. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external models and datasets, which introduces a surface for indirect prompt injection if the ingested data is maliciously crafted.
- Ingestion points: External model weights and configuration are loaded from the HuggingFace Hub; calibration datasets (e.g.,
wikitext) are loaded for sensitivity measurement and benchmarking. - Boundary markers: No explicit boundary markers or "ignore instructions" delimiters are implemented in the provided prompt templates or code snippets.
- Capability inventory: The skill enables file writing (
model.save_pretrained), network communication for model sharing (model.push_to_hub), and execution of system commands for environment verification. - Sanitization: The skill does not describe specific sanitization or validation routines for the content of downloaded models or datasets before processing.
Audit Metadata