generate-nemo-gym-env
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
nemo_gympackage directly from NVIDIA's official GitHub repository (https://github.com/NVIDIA-NeMo/Gym). This is a legitimate dependency for the described framework.- [INDIRECT_PROMPT_INJECTION]: The generated code for theverifyendpoint creates a surface for indirect prompt injection by processing model-generated trajectories to determine rewards. - Ingestion points: The
verifymethod inserver.pyand the architecture described inreferences/architecture.mdingest untrusted model data viabody.response.output. - Boundary markers: No specific delimiters or safety instructions are included in the generated boilerplate to distinguish between data and embedded instructions.
- Capability inventory: The scaffolded server is capable of exposing arbitrary tool endpoints (
app.post) and interacting with session state. - Sanitization: The provided reward grading logic (e.g., substring matching) does not sanitize or validate model outputs before processing.- [COMMAND_EXECUTION]: The skill utilizes
uv runfor executing local Python scripts and validation commands, andng_runfor launching the environment via the NeMo Gym CLI. These are standard operations for environment development.
Audit Metadata