prepare-code-freeze
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local development tools including
git,ruby,rg(ripgrep), andjust. These tools are used for repository management, configuration validation, and version updates within the local project environment. - [PROMPT_INJECTION]: The skill reads project configuration files (
Cargo.toml,.github/*.yaml) to determine versioning. While this presents an indirect prompt injection surface, the workflow includes manual review instructions ("Review matches before changing them") and is limited to repository management tasks. - [SAFE]: All identified network operations (git fetch/push) are directed at the official NVIDIA project repository, which is consistent with the skill's authorship and purpose.
Audit Metadata