Skills
skills/nvidia/cuopt/cuopt-installation-api-c/Gen Agent Trust Hub

cuopt-installation-api-c

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install packages via conda from well-known and reputable channels including nvidia, rapidsai, and conda-forge.
  • [EXTERNAL_DOWNLOADS]: The verification documentation includes pulling an official Docker image (nvidia/cuopt) for environment validation.
  • [COMMAND_EXECUTION]: The skill uses standard system commands (find, nvidia-smi, nvcc, gcc) and Python scripts for environment discovery and installation verification.
  • [COMMAND_EXECUTION]: A temporary C file is generated in /tmp and compiled with gcc to verify header availability. This is a standard procedure for C library installation verification and does not use untrusted input.
  • [COMMAND_EXECUTION]: The verification script starts a local service (cuopt_service) binding to 0.0.0.0. While this binds to all network interfaces, it is used here in the context of a short-lived local health check and verification process.
  • [SAFE]: All network operations (via curl) are directed at localhost for service health checks, and all documentation links point to official NVIDIA domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 07:41 PM
Security Audit — agent-trust-hub — cuopt-installation-api-c