tao-run-deft-od-aoi
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/prepare_deft_od_aoi_sources.pyinvokes a subprocess call toannotations merge. This is a standard command within the NVIDIA TAO Data Services environment used to consolidate COCO datasets. The command arguments are programmatically generated from validated file paths and a temporary configuration file. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of COCO JSON files and Parquet tables. While these are ingestion points for untrusted data, the processing is strictly limited to structured fields (bounding boxes, image paths, metadata IDs) and numerical embeddings. There are no patterns of interpolation into natural language prompts that would allow for execution of embedded instructions.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive local file paths were detected. The skill uses SHA-256 hashing for file integrity and state management, which is a security best practice.
Audit Metadata