cdf-auto-labeling
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by instructing the agent to never hardcode API keys or secrets, recommending the use of environment variables and placeholders instead.
- [SAFE]: Instructions include mandatory 'dry-run' steps to allow the user to inspect generated shell commands before execution.
- [SAFE]: The skill includes a detailed 'Pre-flight Checklist' and specific shell safety guidance (e.g., double-quoting user inputs) to prevent command injection.
- [SAFE]: All external downloads (container images) are restricted to official and trusted NVIDIA registries (nvcr.io/nvidia/).
Audit Metadata