gguf-quantization
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Privilege Escalation (MEDIUM): The file includes sudo apt install commands for CUDA toolkit installation. Administrative access (sudo) is a high-severity risk factor, though it is contextualized here as a necessary step for hardware acceleration setup, warranting a downgrade from HIGH.
- Unverifiable Dependencies & Remote Code Execution (LOW): The skill provides instructions to install multiple external Python packages (llama-cpp-python, cmake, scikit-build-core) via pip. This introduces external supply chain risks. Severity is lowered as these are standard requirements for the primary purpose of the skill.
- Dynamic Execution (LOW): The documentation uses python -c to execute short diagnostic scripts for environment verification and includes a function to validate GGUF headers using the struct library.
Audit Metadata