test-release-canary
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the execution of a remote installation script. Specifically, it mentions
install.shbeing fetched fromraw.githubusercontent.com/NVIDIA/OpenShell/${head_sha}/install.shand piped to a shell (sh). This resource is owned by the vendor and is used for official product installation. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading configuration and deployment artifacts from external registries, including Helm charts and container images from
ghcr.io/nvidia/openshell/. - [COMMAND_EXECUTION]: The skill instructs the use of several command-line tools for environment setup and verification, such as
gh,kind,helm,kubectl, and theopenshellCLI. It also executes a local initialization script located ate2e/support/install-agent-sandbox.sh.
Audit Metadata