cann-operator-env-config
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a repository configuration file from https://repo.oepkgs.net/ascend/cann/ascend.repo to /etc/yum.repos.d/. This is a vendor-provided configuration for the system package manager.
- [EXTERNAL_DOWNLOADS]: Configures an official Huawei Cloud conda channel (https://repo.huaweicloud.com/ascend/repos/conda) for installing CANN toolkits within Python virtual environments.
- [PRIVILEGE_ESCALATION]: Uses sudo for administrative tasks, including writing to system directories (/etc/yum.repos.d/) and installing packages via yum or apt-get. These actions are necessary for the intended system-level installation.
- [PERSISTENCE]: Modifies ~/.bashrc to include environment variable initialization (source /usr/local/Ascend/ascend-toolkit/set_env.sh). This ensures the Ascend toolkit is available in subsequent terminal sessions.
- [COMMAND_EXECUTION]: Utilizes various system and package management commands (npu-smi, yum, apt-get, conda, pip, bash) to check hardware status, manage dependencies, and install the CANN framework components.
Audit Metadata