llava
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone the LLaVA source code from its public GitHub repository (
https://github.com/haotian-liu/LLaVA) and install it locally usingpip install -e .. - [COMMAND_EXECUTION]: The skill and its references include commands to run inference servers, Gradio web interfaces, and DeepSpeed-based training scripts (
llava.serve.cli,llava.serve.gradio_web_server, andllava/train/train_mem.py). These are standard operations for model deployment and research. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes external images and user-provided text queries.
- Ingestion points: Images are loaded via
Image.open()or CLI arguments inSKILL.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded visual text are present in the example prompts.
- Capability inventory: The documented capabilities are limited to text generation and terminal output; no high-risk actions (like file writes or network requests) are triggered by the model's output in the provided code.
- Sanitization: No sanitization of the generated output is shown before it is printed to the console.
Audit Metadata