tao-finetune-cosmos-reason
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes system commands to perform its tasks. The script
scripts/prepare_cosmos3_vlm_checkpoint.pyusessubprocess.runto callgit cloneanddocker run. Additionally, theinferenceandquantizeactions inreferences/skill_info.yamluse Python heredocs to execute CLI tools likecosmos-rl-inferenceandcosmos-rl-quantize. These are functional requirements for model training and conversion. - [EXTERNAL_DOWNLOADS]: The skill fetches resources from external repositories. It clones the
cosmos-frameworkrepository from NVIDIA's official GitHub and pulls a PyTorch container image from NVIDIA's container registry. It also interacts with Hugging Face to download theCosmos3-Nanomodel weights. These external sources are associated with the vendor or are well-known technology providers. - [SAFE]: No malicious patterns or security vulnerabilities were identified. The handling of sensitive information, such as the
HF_TOKENfor Hugging Face authentication, follows standard security best practices by utilizing environment variables and container secrets.
Audit Metadata