nvcf-self-managed-installation
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains comprehensive documentation for the installation and operation of NVCF stacks using standard DevOps tools. No malicious behavior, obfuscation, or unauthorized data access patterns were detected.
- [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands (such as
kubectl,helm,helmfile,make, anddocker) to manage infrastructure. This usage is consistent with the skill's stated purpose and intended for use by authenticated infrastructure administrators. - [EXTERNAL_DOWNLOADS]: Software bundles are fetched from NVIDIA's official NGC registry, and additional tooling like Kyverno is installed from well-known community Helm repositories. These operations target trusted vendor domains and official service registries.
- [CREDENTIALS_UNSAFE]: Sensitive information is handled using placeholders and the skill recommends best practices, such as storing secrets in environment-specific files and using Kubernetes Secrets for runtime authentication, rather than hardcoding credentials.
Audit Metadata