earth2studio-install

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches live installation documentation from nvidia.github.io, which is the official documentation site for the vendor (NVIDIA).
  • [COMMAND_EXECUTION]: The troubleshooting section includes instructions for the user to run sudo apt-get install for system dependencies. The skill explicitly forbids the agent from executing these or any other installation commands directly.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external web source (nvidia.github.io). 1. Ingestion points: Data is fetched using WebFetch in SKILL.md (Step 1). 2. Boundary markers: None explicitly defined for the external content. 3. Capability inventory: The agent is restricted by a 'Never install packages automatically' rule, limiting its ability to execute commands without user intervention. 4. Sanitization: No specific sanitization or filtering of the fetched content is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 08:01 AM
Security Audit — agent-trust-hub — earth2studio-install