timesfm-forecasting

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/check_system.py uses the subprocess module to execute system-level commands like sysctl and vm_stat on macOS. These operations are strictly limited to determining total physical RAM and available memory to prevent the application from crashing on low-resource machines.
  • [DYNAMIC_EXECUTION]: The script scripts/check_system.py utilizes importlib.import_module to verify that essential dependencies (specifically timesfm and torch) are correctly installed before attempting to initialize the model. This is a legitimate safety check for local environment configuration.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the underlying timesfm library to download pretrained model weights from the official Google Research repository on Hugging Face (google/timesfm-2.5-200m-pytorch). These weights are cached locally in the user's standard Hugging Face cache directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 09:49 AM
Security Audit — agent-trust-hub — timesfm-forecasting