nanogpt
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Tiny Shakespeare dataset from a remote repository during data preparation. This is a standard procedure for retrieving training data from common developer resources.
- Evidence:
https://raw.githubusercontent.com/karpathy/char-rnn/master/data/tinyshakespeare/input.txtis fetched using therequestslibrary inreferences/data.mdandreferences/training.md. - [EXTERNAL_DOWNLOADS]: The skill uses established machine learning libraries to download large-scale datasets and pre-trained model weights from official repositories.
- Evidence: Uses the
datasetslibrary to loadopenwebtextand thetransformerslibrary to fetchgpt2model checkpoints from HuggingFace. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of arbitrary text files for model training, which represents a potential surface for indirect prompt injection if the source data is malicious.
- Ingestion points: The skill processes user-supplied text files (e.g.,
my_data.txt) as described inSKILL.md(Workflow 4) andreferences/data.md. - Boundary markers: There are no explicit delimiters or warnings to ignore instructions embedded within the training text.
- Capability inventory: The skill uses
subprocess.runor direct shell execution to launch training and sampling scripts based on the processed data. - Sanitization: No sanitization or filtering is applied to the raw text content before tokenization and training.
Audit Metadata