tao-train-pointpillars
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSOBFUSCATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official TAO Toolkit container images hosted on the NVIDIA Container Registry (nvcr.io), which is a well-known vendor service for software distribution.
- [OBFUSCATION]: The file skill.oms.sig contains a Base64-encoded In-Toto statement used for skill integrity verification and provenance. This is a standard security feature for verifying the authenticity of the skill files and does not contain malicious code.
- [CREDENTIALS_UNSAFE]: Configuration templates in the references folder use the placeholder string 'tlt_encode' for model encryption keys. This is a documented default value for the TAO Toolkit and does not represent an actual secret or credential exposure.
Audit Metadata