build-models
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill suggests an installation method using
sh <(curl -fsSL https://cog.run/install.sh). While this pattern typically carries risk, the source is the official domain for the Cog tool, which is a core part of the Replicate ecosystem maintained by the skill author. - [EXTERNAL_DOWNLOADS]: References tools and weights downloaded from
github.com/replicate/pgetandweights.replicate.delivery. These are official vendor resources designed for high-performance model deployment and do not interact with untrusted third-party services. - [COMMAND_EXECUTION]: Provides code snippets that use
subprocessto run vendor-specific tools likepget. These commands are standard for the described workflow of managing model weights and are used in a controlled environment.
Audit Metadata