uv-moe-training

Warn

Audited by Snyk on Feb 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs fetching external code (e.g., "git clone https://github.com/microsoft/Megatron-DeepSpeed" in Installation) and recommends using public, user‑generated datasets (e.g., "The Pile" in references/training.md and the --data-path /path/to/data training commands), so the workflow ingests open/public third‑party content that can materially influence model behavior.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 27, 2026, 12:41 PM