verl-rl-training

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the verl library from its official GitHub repository and to pull official Docker images for production environments.
  • [COMMAND_EXECUTION]: Contains standard shell commands for installing Python dependencies, initializing distributed compute clusters via Ray, and launching training jobs using the framework's trainer modules.
  • [DYNAMIC_EXECUTION]: Documents the ability to load and execute custom reward functions from local Python files, which is a core and expected feature for reinforcement learning training pipelines.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external datasets for training purposes; while this involves ingesting untrusted data into the training pipeline, it is the primary intended function of the library and follows standard ML engineering practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 03:22 PM