huggingface-zerogpu
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates and patterns for building Gradio applications that ingest user-provided strings (prompts) for processing by machine learning models.
- Ingestion points: Functions like
generate(prompt: str)inSKILL.mdserve as input points for untrusted data. - Capability inventory: The skill utilizes GPU-based inference capabilities via the
transformersandtorchlibraries. - Boundary markers: The provided code snippets do not demonstrate the use of boundary delimiters or specific "ignore" instructions for the model when processing input.
- Sanitization: No explicit input sanitization or validation mechanisms are shown in the basic reference patterns.
- [EXTERNAL_DOWNLOADS]: The skill provides guidance on acquiring necessary binary dependencies from external sources to ensure compatibility with ZeroGPU hardware.
- Evidence:
references/cuda-and-deps.mdreferences downloading pre-built wheels from the officialDao-AILab/flash-attentionGitHub repository and using thekernels-communityrepository on Hugging Face. - Context: These references target well-known research repositories and official community hubs for the purpose of resolving hardware-specific installation constraints.
Audit Metadata