Audit SD.Next model integrations end-to-end: loaders, detect/routing, reference catalogs, and pipeline API contracts.
68
83%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Passed
No findings from the security scan
Run a consolidated model-integration audit that combines loader checks, detect/routing checks, reference-catalog checks, and pipeline contract checks.
.github/instructions/core.instructions.md for relevant core runtime and model integration guidance before proceeding.This skill combines four audit surfaces. Run them in this order unless user scope limits categories:
check-loaders equivalent)check-detect-routing equivalent)check-reference-catalog equivalent)check-pipeline-contracts equivalent)pipelines/model_*.pymodules/sd_detect.pymodules/sd_models.pymodules/modeldata.pydata/reference-base.jsondata/reference-cloud.jsondata/reference-quantized.jsondata/reference-distilled.jsondata/reference-nunchaku.jsondata/reference-community.jsonmodels/Reference/Pipeline files as needed:
pipelines/<model>/pipeline.pypipelines/<model>/model.pyFor each target model loader in pipelines/model_*.py, verify:
sd_models.path_to_repo(checkpoint_info) and sd_models.hf_auth_check(...) usagemodel_quant.get_dit_args(...) where applicabletorch_dtype)generic.load_transformer, generic.load_text_encoder, tokenizer/processor)sd_hijack_te, sd_hijack_vae) where requiredpipe.task_args defaults where neededdevices.torch_gc(...) presentFlag stale patterns, missing hooks, or conflicting load behavior.
Verify model family alignment across:
modules/sd_detect.py detection heuristicsmodules/sd_models.py load dispatch branchmodules/modeldata.py reverse classification from loaded pipeline classChecks:
Verify references for model families intended to appear in model references.
Checks:
data/reference-base.jsondata/reference-cloud.jsondata/reference-quantized.jsondata/reference-distilled.jsondata/reference-nunchaku.jsondata/reference-community.jsonpath, preview, desc when expected)models/Reference/ (or explicitly placeholder if intentional)For custom pipelines (pipelines/<model>/pipeline.py), verify:
diffusers.DiffusionPipelinefrom_pretrained wiring is coherent with actual artifact layoutencode_prompt semantics are consistent with tokenizer/text encoder setup__call__ supports expected public args for its task and does not expose unsupported generic argsoutput_type and return_dict behavior are consistentWhen feasible:
If runtime checks are not feasible, report limitations clearly.
Return findings by severity:
For each finding include:
loader, detect-routing, reference, pipeline-contract)Also include summary counts:
A full pass requires all of the following in audited scope:
If any area is intentionally out of scope, mark as partial pass with explicit exclusions.
058a7f0
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.