replicate
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official libraries including
replicateandcogfrom standard package registries to facilitate API interactions. - [COMMAND_EXECUTION]: Uses the
cogCLI tool to run local predictions and deploy machine learning models to the Replicate cloud environment. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it passes user-supplied input directly to external machine learning models without sanitization.
- Ingestion points: The
promptandnegative_promptparameters inrun_model.py,run_llm.py, andpredict.pyfiles. - Boundary markers: Absent; user input is not wrapped in delimiters to prevent instruction overriding.
- Capability inventory: Network communication via the
replicatelibrary to perform remote model inference. - Sanitization: No evidence of input filtering or character escaping to mitigate malicious prompt content.
Audit Metadata