parabricks
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a diagnostic utility (
scripts/check_parabricks_runtime.sh) that executes standard system commands such asnvidia-smi,docker info,df, anduname. These operations are limited to collecting environment metadata (GPU status, storage availability, and container runtime access) required for assessing deployment readiness on the target host. - [INDIRECT_PROMPT_INJECTION]: The
scripts/translate_star_to_parabricks.pyscript ingests user-supplied STAR command arguments via JSON to generate Parabricks command drafts. The skill mitigates risks associated with untrusted data ingestion by implementing strict token validation (e.g., regex checks for tags) and utilizingshlex.quotefor all generated command-line artifacts to prevent shell injection during output presentation. - [EXTERNAL_DOWNLOADS]: The readiness helper optionally pulls container images from the NVIDIA Container Registry (
nvcr.io) and official CUDA repositories (nvidia/cuda) to test GPU access within containers. These network operations are directed at trusted vendor infrastructure and are used solely for authorized diagnostic probes.
Audit Metadata