ambient-healthcare-agent-with-nemotron-voice-agent
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto interact with the Docker daemon and Git binary. For example,scripts/verify_docker_compose_access.pymanages disposable containers to verify environment health, andscripts/nva_generic_defaults.pyexecutes Git commands to identify the repository state. These calls use list-based arguments to prevent shell injection and are necessary for the skill's setup and verification functions. - [DYNAMIC_EXECUTION]: The skill performs dynamic module loading using
importlib.import_moduleinscripts/apply_generic_agent_template.pyandscripts/run_expected_conversation.pyto initialize databases and load healthcare tool handlers. Additionally,scripts/apply_generic_agent_template.pyuses theastmodule and string manipulation to patch Python and YAML files in the target NVA repository. This behavior is the core mechanism used to apply healthcare overlays to the base NVIDIA blueprint. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user conversation history, which is interpolated into system prompts for live validation tests in
scripts/run_expected_conversation.py. While the skill includes instructions to the agent to follow strict formatting and uses semantic judging to verify behavior, the ingestion of untrusted conversational data represents a persistent attack surface for indirect prompt injection. - [EXTERNAL_DOWNLOADS]: The skill clones the Nemotron Voice Agent repository from
github.com/NVIDIA-AI-Blueprints. This is an official repository owned by the skill's vendor (NVIDIA) and is the intended target for customization.
Audit Metadata