tao-analyze-gaps-visual-changenet
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
docker runcommands. These commands invoke the NVIDIA TAO data-services container to perform signed distance calculations and threshold sweeps. The execution includes necessary parameters like--gpus alland host volume mounting (-v $WORKSPACE:$WORKSPACE) which are required for the skill's intended computational purpose. - [EXTERNAL_DOWNLOADS]: The skill setup logic resolves a specific Docker image tag using a local versioning script and performs a
docker pull. This targets official NVIDIA TAO Toolkit images, which are trusted vendor resources aligned with the skill's functionality. - [DATA_EXPOSURE]: The skill includes a packaging hook (
hooks/rca-package.sh) that automatically copies session transcript logs and project settings into the output directory when an analysis report is generated. While this involves accessing the local.claudedirectory, it is a functional requirement for Root Cause Analysis (RCA) workflows to preserve the context of the model evaluation. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from inference results (
inference.csv) and training configurations (train.yaml). - Ingestion points: Data is read from user-provided experiment directories into the data-services container and local Python analysis blocks.
- Boundary markers: The skill does not use explicit boundary markers or "ignore instructions" warnings when interpolating data into the final
RCA_Report.md. - Capability inventory: The skill has capabilities for Docker execution, file system writes (via
cpand Python), and network access (viadocker pull). - Sanitization: External content is parsed using structured data libraries like
pandasandpyarrow, which mitigates common injection risks during processing.
Audit Metadata