remote-gpu-trainer
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]
- Use of shell
evaland unsafepickleloading. - Found in
scripts/run_one.sh.templateandrun_queue.sh.template: The templates use theevalcommand to execute thePROXY_HOOKvariable which contains platform-specific setup commands. - Found in
scripts/verify_local.py: The script allows unsafepickledeserialization viatorch.loadwhen the--allow-pickleflag is provided. It includes prominent warnings about the risks. - [INDIRECT_PROMPT_INJECTION]
- Data ingestion surface from remote logs.
- Found in
scripts/health_patrol.sh.template: The script performs grepping on remote log files and echoes values that the agent parses to determine job status. This provides a surface where malicious content on a remote machine could influence agent logic. - [COMMAND_EXECUTION]
- Use of destructive process termination.
- Found in
scripts/reap_vram_zombies.sh: The script useskill -9to terminate processes identified as GPU zombies. Its use is restricted by a--forceflag. - [EXTERNAL_DOWNLOADS]
- References to external package and model registries.
- The skill references resources from
pypi.org,huggingface.co,aliyun.com, andtuna.tsinghua.edu.cnfor downloading models and dependencies. These references are to well-known services and mirrors.
Audit Metadata