skills/ascend-ai-coding/awesome-ascend-skills/external-gitcode-ascend-arxiv-recommendation-npu/Gen Agent Trust Hub
external-gitcode-ascend-arxiv-recommendation-npu
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several system commands via
subprocess.runto perform its tasks: - Invokes the
deepxivCLI tool to search and fetch paper details from arXiv inscripts/fetcher.py. - Executes
git cloneto download source code from repositories identified in the papers withinscripts/source_detector.py. - Uses
curlto interact with the GitHub API for counting Python files in remote repositories inscripts/source_detector.py. - Runs
npu-smiand other diagnostic tools inscripts/check_npu_env.shto verify the hardware environment. - [EXTERNAL_DOWNLOADS]: The skill is designed to automatically download third-party source code from GitHub repositories linked in research papers. It also includes a
GITHUB_MIRRORconfiguration usingghproxy.cominscripts/config.pyto facilitate downloads in various network environments. - [REMOTE_CODE_EXECUTION]: The skill's primary purpose is to fetch external, untrusted codebases for subsequent NPU adaptation. While it does not directly execute the downloaded code itself, it prepares a
migration_task.jsonand instructs the agent to hand off the code to a separate migration skill for execution and validation.
Audit Metadata