verify
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git diffto list files modified in the current session to determine the scope of verification.- [COMMAND_EXECUTION]: Runs style checks usingpython setup.py style, which involves executing a local build script to ensure code formatting compliance.- [COMMAND_EXECUTION]: Executespytestacross several core project directories (such asasr,tts,audio,speechlm2, andcommon) to verify the integrity of code changes.- [EXTERNAL_DOWNLOADS]: Severalpytestcommands include the--downloadflag, which triggers the retrieval of external datasets or pre-trained models required for verification. This is standard and expected behavior for the NeMo machine learning framework.- [PROMPT_INJECTION]: The skill ingests untrusted data in the form of file paths returned by thegitcommand. Ingestion point:SKILL.mdshell block. Boundary markers: None. Capability inventory: Shell execution of Python scripts and the pytest framework. Sanitization: None. This configuration creates a surface for indirect prompt injection, which is a common characteristic of repository management and development skills.
Audit Metadata