osmo-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill's primary purpose is the deployment and configuration of the NVIDIA OSMO platform. It includes detailed instructions for various cloud providers and local environments, emphasizing the use of specific version pins for security and compatibility.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell scripts (e.g.,
deploy-osmo-minimal.sh) and standard CLI tools includingkubectl,helm,terraform,az, andaws. These operations are standard for infrastructure-as-code and application deployment tasks. - [EXTERNAL_DOWNLOADS]: The documentation indicates that the deployment script will automatically download and install the
osmoCLI from GitHub if it is not already present on the system. As this component is provided by NVIDIA (the skill's author), this is a routine software distribution mechanism for the tool. - [CREDENTIALS_UNSAFE]: The skill correctly avoids hardcoding sensitive information. It instructs users to provide database passwords and cloud credentials through environment variables, Kubernetes Secrets, or established cloud authentication mechanisms (e.g.,
az login,aws configure, and Workload Identity).
Audit Metadata