cuopt-server-api-python

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a legitimate technical guide and set of assets for using NVIDIA's cuOpt optimization server via REST API.
  • [COMMAND_EXECUTION]: The instructions include standard commands for starting a cuOpt server locally (python -m cuopt_server.cuopt_service) or via Docker (docker run). These are documented developer workflows for the specific technology and do not represent a security risk.
  • [EXTERNAL_DOWNLOADS]: The skill references the nvidia/cuopt Docker image and uses the requests Python library. These resources are from a well-known vendor and official registries, which is standard practice for this use case.
  • [DATA_EXFILTRATION]: The Python client scripts (client.py) communicate with a server specified by the CUOPT_SERVER_URL environment variable, defaulting to localhost. The data sent consists of optimization parameters (cost matrices, task locations, fleet data) and does not involve harvesting sensitive system files or credentials.
  • [REMOTE_CODE_EXECUTION]: No patterns of downloading and executing remote scripts (e.g., curl | bash) or unsafe dynamic execution (e.g., eval()) were detected. The scripts are straightforward REST clients.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 07:41 PM
Security Audit — agent-trust-hub — cuopt-server-api-python