skills/nvidia-nemo/nemo/verify/Gen Agent Trust Hub

verify

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Executes git diff to identify changed files and python setup.py for style verification. These are standard commands within the repository's development workflow.
  • [EXTERNAL_DOWNLOADS]: The pytest test suite is invoked with a --download flag. In the context of the NVIDIA NeMo project, this facilitates the retrieval of external assets, such as pre-trained models or datasets, necessary for comprehensive testing.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests untrusted data from the local environment.
  • Ingestion points: File names/paths from git diff --name-only HEAD and test output from pytest.
  • Boundary markers: None present in the instructions.
  • Capability inventory: Shell command execution via git, python, and pytest.
  • Sanitization: No explicit sanitization or validation of the ingested output is defined, though the risk is minimal given the intended developer use case.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 01:42 PM
Security Audit — agent-trust-hub — verify