sentencepiece
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download source code from Google's official GitHub repository at
https://github.com/google/sentencepiece.gitfor C++ installation. - [PRIVILEGE_ESCALATION]: The installation documentation includes the use of
sudo make installto install the compiled C++ library into system directories. This is a standard administrative procedure for system-wide software installation. - [COMMAND_EXECUTION]: The skill includes shell commands for building the project using
cmakeandmake, as well as using thespm_traincommand-line utility to generate tokenization models from text files. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes untrusted text data from local files (e.g.,
data.txt) or external datasets (e.g., HuggingFace'swikitext) during the model training phase inSKILL.mdandreferences/training.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the training code examples.
- Capability inventory: The skill uses the SentencePiece library to analyze text. It does not perform network requests or unauthorized file modifications based on the contents of the processed text.
- Sanitization: The tokenizer treats input as raw Unicode text and does not perform filtering or sanitization, which is expected behavior for a subword tokenization tool.
Audit Metadata