transformers

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs standard machine learning dependencies (torch, transformers, datasets, evaluate, accelerate, timm, pillow, librosa, soundfile) from official package registries.
  • [DATA_EXFILTRATION]: The skill documents the use of push_to_hub() to upload models and configurations to the Hugging Face Hub, which is an intended and legitimate function for sharing models.
  • [PROMPT_INJECTION]: The skill provides patterns for processing external, potentially untrusted data through machine learning models, creating an inherent surface for indirect prompt injection.
  • Ingestion points: User-supplied text in pipelines (references/pipelines.md), external datasets loaded for training (references/training.md), and prompts for text generation (references/generation.md).
  • Boundary markers: No specific adversarial boundary markers are suggested; the skill relies on standard library tokenization and processing.
  • Capability inventory: Capability to write to the local file system (save_pretrained) and perform network uploads (push_to_hub).
  • Sanitization: Documentation mentions basic filtering using bad_words_ids, but primarily utilizes default library behaviors for input processing.
  • [COMMAND_EXECUTION]: The skill includes shell commands for package installation and setting environment variables for authentication, which are standard for the development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 11:43 AM
Security Audit — agent-trust-hub — transformers