tilekernels-gpu-kernels
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes the
tilelang.compile()function to generate and compile GPU kernels from a Python DSL at runtime, facilitating the execution of dynamically generated code on hardware.- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install thetile-kernelspackage viapipand references a public repository on GitHub hosted by DeepSeek.- [COMMAND_EXECUTION]: The documentation includes several shell commands for environment setup, package installation, and executing test suites usingpytest.- [INDIRECT_PROMPT_INJECTION]: The library provides tools for Mixture of Experts (MoE) routing and activation quantization. If an agent bases its subsequent logic or instruction processing on the values produced by these kernels when they are operating on untrusted data, a theoretical injection surface exists. - Ingestion points: The
tile_kernels/moe/andtile_kernels/quant/modules process input tensors that may originate from untrusted external sources. - Boundary markers: There are no explicit instructions or delimiters to isolate processed data from the agent's control flow.
- Capability inventory: The skill possesses the ability to compile GPU kernels and execute shell commands for testing and benchmarking.
- Sanitization: No input validation or tensor sanitization is described in the provided implementation examples.
Audit Metadata