unsloth-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various system and Python commands to manage the training environment.
- Uses
nvidia-smito detect GPU capabilities and driver versions. - Utilizes
uvorpipto create a virtual environment and install necessary Python packages. - Spawns subprocesses to run internal workflow scripts like
sft_train.py,evaluate_model.py, andexport_model.py. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external resources required for machine learning.
- Installs the
unslothlibrary and its dependencies from official package registries. - Downloads pre-trained models and tokenizers from Hugging Face based on user configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could potentially contain malicious instructions.
- Ingestion points: Reads user-supplied dataset files in JSONL format via
scripts/data_validation.pyandscripts/sft_train.py. - Boundary markers: Implements strict data validation checks to ensure records match expected ChatML or Alpaca formats before processing.
- Capability inventory: Possesses the capability to execute training and evaluation scripts which involve substantial GPU computation and file system writes.
- Sanitization: Employs a dedicated configuration validator (
scripts/workflow_config.py) to enforce schema constraints and prevent unexpected execution parameters.
Audit Metadata