tao-run-on-docker

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a platform setup script from a directory path resolved at runtime (bash "${TAO_SKILL_BANK_ROOT}/platform/tao-setup-nvidia-gpu-host/scripts/setup-nvidia-gpu-host.sh").
  • [COMMAND_EXECUTION]: Provides shell snippets that use sudo for administrative host configuration, including Docker service management and modification of the system's daemon.json configuration file.
  • [EXTERNAL_DOWNLOADS]: Connects to nvcr.io (NVIDIA Container Registry) for authentication and image retrieval.
  • [CREDENTIALS_UNSAFE]: Facilitates the handling of sensitive environment variables (NGC_KEY, HF_TOKEN, AWS_SECRET_ACCESS_KEY) for container workloads, recommending the -e flag to prevent credential exposure in shell history.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 05:48 PM
Security Audit — agent-trust-hub — tao-run-on-docker