musa-ubuntu2204-install
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to download SDK components, toolkit binaries, and Python wheels from official Moore Threads domains (mthreads.com) and their GitHub repository. These sources are appropriate for the specialized hardware support described.\n- [SAFE]: The instructions explicitly recommend security best practices, such as extracting DEB packages using
dpkg-deb -xinto a versioned user-space directory rather than performing a root installation. It also includes steps to verify repository integrity using GPG keys and checksums before installation.\n- [COMMAND_EXECUTION]: The skill utilizes standard system diagnostic tools (e.g.,lspci,uname,lsb_release) to identify hardware and software environment details. It includes a static Python validation script as a heredoc to verify that the accelerator stack is correctly linked and functional.\n- [INDIRECT_PROMPT_INJECTION]: The skill gathers environmental data from the host system to determine the correct compatibility matrix (GPU model, kernel version, etc.). This data ingestion is localized and used solely for configuring the installation environment.
Audit Metadata