nemoclaw-setup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and executes installation scripts directly from NVIDIA's official domain (nvidia.com) and their public GitHub repository (github.com/NVIDIA).
- [REMOTE_CODE_EXECUTION]: Fetches and executes a Node.js environment setup script from NodeSource, a well-known provider of Node.js binaries.
- [COMMAND_EXECUTION]: Uses elevated privileges (sudo) to perform system administration tasks, including package installation, user group modification, and Docker daemon configuration changes.
- [PERSISTENCE]: Configures a systemd service (nemoclaw-forward.service) to ensure that the port-forwarding bridge for the web interface automatically restarts on failure or reboot.
- [DYNAMIC_EXECUTION]: Generates a local bash script (~/.local/bin/nemoclaw-keepalive.sh) at runtime to monitor the health of the port forwarder and restart it if the connection drops.
Audit Metadata