tao-analyze-detection-kpi
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands, primarily
docker runto launch a TAO Data Services container for KPI analysis. - [EXTERNAL_DOWNLOADS]: The skill instructions involve pulling the official TAO Toolkit data-services Docker image from the NVIDIA Container Registry (nvcr.io).
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including YAML configuration files and object detection annotation files (KITTI/COCO). It includes a validation script,
scripts/verify_kpi_analyze_spec.py, which performs type checking, path validation, and range validation on the spec fields to ensure structural integrity before processing.
Audit Metadata