smolvlm
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'SmolVLM-Instruct' model weights (approximately 4GB) from Hugging Face's official repository during the first run. This is an expected operation for local machine learning models.
- [COMMAND_EXECUTION]: The script
view_image.pyis intended to be run via the command line to process local image files. It includes proper validation for file existence, supported extensions (.png, .jpg, .jpeg, .gif, .webp), and file size limits (50MB) to prevent resource exhaustion. - [DATA_EXFILTRATION]: No unauthorized data transmission was detected. The script processes image data locally using the Apple MLX framework and prints the model's textual description to the standard output.
Audit Metadata