turboquant-pytorch
Fail
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone source code from an external repository located at https://github.com/tonbistudio/turboquant-pytorch.
- [EXTERNAL_DOWNLOADS]: Fetches PyTorch binaries from the official download.pytorch.org domain, which is a well-known service for machine learning dependencies.
- [REMOTE_CODE_EXECUTION]: Provides instructions to download a remote repository and immediately execute its internal modules using
python -m turboquant.test_turboquantandpython -m turboquant.validate. - [REMOTE_CODE_EXECUTION]: Includes example code that uses
pickle.load()to deserialize data from a local file. This is an unsafe practice as loading crafted pickle files can lead to arbitrary code execution. - [COMMAND_EXECUTION]: Commands are provided to manipulate the host system's environment, including
git clone,pip installfor multiple external packages, andpythonmodule execution.
Recommendations
- AI detected serious security threats
Audit Metadata