roboflow-custom-weights-upload
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates a workflow that ingests data from local machine learning training checkpoints and environment configuration files.
- Ingestion points: Reads model weights (
.pt,.pth), configuration files (opt.yaml), and.envfiles from the local filesystem (SKILL.md). - Boundary markers: The instructions explicitly warn against using insecure methods like
source .envfor pre-existing files, which could execute malicious shell code, and instead recommend usingpython-dotenvfor safe, scoped reading. - Capability inventory: Includes file system read/write access, shell execution (
pip,uv), and network operations through theroboflowSDK (SKILL.md). - Sanitization: Leverages built-in validation within the Roboflow SDK to verify model types, architectures, and sizes before the upload is finalized.
- [COMMAND_EXECUTION]: The skill involves the use of shell commands for standard developer environment setup and deployment tasks.
- Instructs the use of
uv venvandpip installfor dependency management andpythonfor executing the deployment logic. - [EXTERNAL_DOWNLOADS]: Recommends the installation of official software libraries for interacting with the Roboflow platform.
- Fetches dependencies such as
roboflowandrfdetrfrom the Python Package Index (PyPI), which are standard vendor-owned resources.
Audit Metadata