huggingface-zerogpu
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines function templates that ingest untrusted user data for processing by machine learning models, creating a standard surface for potential prompt injection.
- Ingestion points: The
generateandgenerate_imagefunction examples inSKILL.mdaccept apromptstring argument from the user. - Boundary markers: The provided code snippets do not implement delimiters or instructions to the model to ignore potential commands embedded within the input prompt.
- Capability inventory: The functions utilize the
transformerslibrary and@spaces.GPUfor CUDA-accelerated inference tasks. - Sanitization: There are no explicit validation or sanitization steps shown for the input strings before they are passed to the model pipeline.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for managing dependencies and wheels from external sources.
- The documentation in
references/cuda-and-deps.mdsuggests downloading pre-built wheels from GitHub releases (e.g.,Dao-AILab/flash-attention) and mentions usingkernels-communityresources on Hugging Face. - It includes a command to query metadata from the official PyPI JSON API using
curlpiped to apython3parser for version verification. - These references target well-known development services and official package repositories.
Audit Metadata