axolotl
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data for model fine-tuning from varied sources including Hugging Face, S3, and local files. This creates a surface where maliciously crafted data could influence agent behavior during training or evaluation.
- Ingestion points: Dataset loading via YAML configurations (e.g.,
path,data_files,pretraining_dataset) as described inreferences/other.mdandreferences/dataset-formats.md. - Boundary markers: The skill relies on chat templates and Jinja2 formatting to delimit message turns (e.g.,
<|im_start|>/<|im_end|>), providing structural markers for processed content. - Capability inventory: The skill manages powerful execution capabilities such as
cli.cloud.modal_.run_cmdfor cloud commands (referenced inreferences/api.md),cli.train.do_trainfor training execution (references/api.md), and file system writes viaconvert.FileWriter(references/api.md). - Sanitization: While schema validation using Pydantic is mentioned for configurations, no explicit sanitization for user-provided dataset content is detailed in the reference documentation.
- [COMMAND_EXECUTION]: The skill provides numerous examples and API functions for executing system commands. This includes the
run_cmdfunction for Modal cloud integration, NCCL performance test commands, and the use of thetorchrunlauncher for distributed multi-node training. - [EXTERNAL_DOWNLOADS]: Installation and setup instructions involve downloading code and dependencies from external repositories. This includes fetching configurations from GitHub repositories and installing packages via PyPI using
pipanduv. - [REMOTE_CODE_EXECUTION]: Documentation includes instructions for installing tools via remote scripts from well-known sources, such as the
uvinstaller via a shell pipe fromastral.sh, and installing specific package revisions directly from GitHub URLs. - [DYNAMIC_EXECUTION]: The skill makes extensive use of dynamic code techniques, including PyTorch's
torch.compilefor model acceleration and various monkey-patching modules (e.g.,monkeypatch.lora_kernels,monkeypatch.gradient_checkpointing) to modify library and model behavior at runtime for performance optimizations.
Audit Metadata