earth2studio-data-fetch
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch documentation and lexicon configuration files from NVIDIA's official GitHub repository and documentation site to ensure accurate API usage. All referenced domains are trusted vendor resources.
- [COMMAND_EXECUTION]: The skill guides the generation of Python scripts for data retrieval. It also references the installation of required dependencies using standard package managers like
uv. - [DATA_EXFILTRATION]: The skill mentions the configuration of a
.cdsapircfile for authentication. This is a standard and safe practice for managing credentials for the Climate Data Store API. - [PROMPT_INJECTION]: The skill utilizes external data from documentation and lexicon files to inform its code generation process, which is an indirect prompt injection surface. The risk is mitigated as the ingestion is limited to official NVIDIA sources.
- Ingestion points: Documentation and lexicon files referenced in SKILL.md from
nvidia.github.ioandgithub.com/NVIDIA. - Boundary markers: None explicitly defined.
- Capability inventory: Python script generation.
- Sanitization: None explicitly defined.
Audit Metadata