unsloth-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute management tasks such as verifying GPU status vianvidia-smiand running local training scripts (e.g.,sft_train.py). These operations are necessary for the skill's purpose and are limited to the user's project environment. - [EXTERNAL_DOWNLOADS]: Automated installation of official machine learning libraries (
unsloth,torch,transformers) is performed usinguvorpipwithin a local virtual environment. This process facilitates the necessary setup for model training without affecting system-wide packages. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied training data in JSONL format.
- Ingestion points: Data is read in
scripts/sft_train.pyandscripts/evaluate_model.pyto facilitate fine-tuning operations. - Boundary markers: The
scripts/data_validation.pymodule performs checks on JSON structure, required fields (ChatML/Alpaca), and duplicate records before any training occurs. - Capability inventory: The skill executes subprocesses for environment setup and writes model checkpoints/logs to the local disk.
- Sanitization: While the raw content of training examples is not sanitized (as it is required for the learning objective), the strict schema validation prevents malformed data from interfering with the script's execution logic.
Audit Metadata