long-context
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install several third-party Python libraries including
einops,rotary-embedding-torch, andflash-attnfrom public registries. It also provides commands to clone external GitHub repositories to access research implementations. - Evidence:
git clone https://github.com/jquesnelle/yarnandhttps://github.com/ofirpress/attention_with_linear_biasesreferences. - [COMMAND_EXECUTION]: The skill provides multiple shell commands for environment setup and model training, including script execution from cloned repositories.
- Evidence:
pip installcommands inSKILL.mdandpython scripts/train.pyin the fine-tuning section. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of large, untrusted external datasets (e.g., PG-19, arXiv, GitHub code) for model fine-tuning. This creates a vulnerability surface where malicious instructions embedded in the data could influence the agent during the fine-tuning or evaluation process.
- Ingestion points:
references/fine_tuning.md(e.g.,load_dataset('pg19', ...)). - Boundary markers: None identified; data is processed as raw text for tokenization.
- Capability inventory: The skill has capabilities for shell command execution (
pip,git), file writing (model.save_pretrained), and network operations via HuggingFace API. - Sanitization: No specific sanitization or filtering logic is provided for the incoming dataset content.
Audit Metadata