kermt-setup
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands on the host system to verify Docker status, GPU availability, and to build or remove local Docker images. These operations are managed through a local helper script (
agent/scripts/kermt_container.sh) within the repository. - [EXTERNAL_DOWNLOADS]: The skill environment references official CUDA base images (
nvidia/cuda:12.6.3-cudnn-devel-ubuntu22.04) from the official NVIDIA repository on Docker Hub. These are well-known and trusted resources for GPU-accelerated environments. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined environment variables and paths for the repository location (
KERMT_REPO). While this involves processing external input used in command construction, the skill follows a fixed workflow intended for local environment bootstrapping and includes explicit user confirmation steps for high-impact actions like image removal.
Audit Metadata