Skills
Navigate
skills/nvidia/skills/build-and-dependency/Gen Agent Trust Hub

build-and-dependency

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches container tags from the official NVIDIA container registry (nvcr.io) and provides instructions to clone the Megatron-Bridge repository from the official NVIDIA-NeMo GitHub organization. These operations target trusted infrastructure.
  • [COMMAND_EXECUTION]: The skill utilizes standard development tools, including docker for containerization and uv for Python package management. It also includes commands for distributed training using torch.distributed.run and local script execution (switch_mcore.sh), which are appropriate for its stated purpose of environment setup.
  • [SAFE]: No instances of prompt injection, data exfiltration, or obfuscation were detected. The technical instructions are consistent with the skill's purpose and adhere to secure development practices by recommending container-isolated environments and pinned dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 06:14 AM
Security Audit — agent-trust-hub — build-and-dependency