tao-run-on-local-docker

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell scripts for environment verification and Docker lifecycle management. It runs local scripts like setup-nvidia-gpu-host.sh and manages containers using the Docker CLI and Python SDK.
  • [EXTERNAL_DOWNLOADS]: It installs necessary dependencies, including the nvidia-tao-sdk and docker packages from PyPI. Additionally, it pulls official TAO container images from the NVIDIA NGC registry.
  • [DATA_EXFILTRATION]: The skill manages access to cloud storage and model registries through standard environment variables such as ACCESS_KEY, NGC_KEY, and HF_TOKEN. It also provides functionality to mount SSH keys for remote job monitoring, which is a documented feature for multi-node coordination.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 05:48 PM
Security Audit — agent-trust-hub — tao-run-on-local-docker