hccl-test
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of shell commands and scripts to manage NPU hardware, configure environment variables, and compile performance testing tools from source using
make. - [REMOTE_CODE_EXECUTION]: By design, the skill uses
mpirunandsshto execute benchmarking binaries and system checks across multiple nodes in a distributed cluster. The scripts useStrictHostKeyChecking=nofor SSH connections, which is a common configuration in automated cluster environments for testing collective communication bandwidth. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions to download the MPICH framework from its official project website (
mpich.org), which is a well-known and trusted source for MPI implementations used in high-performance computing. - [CREDENTIALS_UNSAFE]: The skill facilitates the setup of SSH passwordless login by providing instructions for
ssh-keygenandssh-copy-id. While this involves interaction with sensitive SSH keys, it is documented as standard practice for distributed HPC environments to enable automated execution across nodes. - [SAFE]: All identified high-privilege operations, such as running as root and performing remote execution, are directly associated with the skill's primary purpose of cluster-level hardware benchmarking and performance tuning.
Audit Metadata