clip-aware-embeddings
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its input validation scripts.\n
- Ingestion points:
scripts/validate_clip_usage.pyprocesses raw user queries passed as command-line arguments.\n - Boundary markers: The script lacks delimiters or instructions to ignore embedded commands within the processed queries.\n
- Capability inventory: The skill's configuration allows for
Bash,Read,Write, andEditoperations.\n - Sanitization: No sanitization or escaping is performed on the input string before logic evaluation.\n- [COMMAND_EXECUTION]: The skill uses
Bashto manage environment setup and run validation scripts.\n - Executes
pip installfor dependency management during installation.\n - Runs local validation and diagnostic scripts as part of its documented workflow.\n- [EXTERNAL_DOWNLOADS]: The skill performs downloads of machine learning models and libraries from well-known sources.\n
- Fetches model weights and processors from Hugging Face using the
transformerslibrary (e.g., models from theopenaiandfacebookorganizations).\n - Installs standard Python packages including
transformers,torch, andpillowfrom the Python Package Index (PyPI).
Audit Metadata