cdf-curation-and-retrieval
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of Docker images from NVIDIA's official registry (
nvcr.io) and retrieves model weights from HuggingFace. It also provides instructions for installing the FFmpeg utility from the well-knownconda-forgeregistry. - [COMMAND_EXECUTION]: Instructions involve executing shell commands via
makeanddockerto run video and image curation pipelines. These operations are gated by mandatory pre-flight checks and explicit user authorization requirements. - [INDIRECT_PROMPT_INJECTION]: The skill identifies and manages the risk of processing untrusted data by implementing a 'Workplace legal-review gate.' This requires users to confirm legal compliance and worker notification before the agent will generate configurations for sensitive domains like employee conduct monitoring.
Audit Metadata