cdf-orchestration-preflight
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the installation of essential tools and infrastructure components (Docker, Kubernetes, NVIDIA Container Toolkit, Helm, uv, AWS CLI, and Calico CNI) from official, trusted, and well-known project websites.\n- [COMMAND_EXECUTION]: Diagnostic scripts (
preflight.pyandstorage_check.py) usesubprocess.runto interact with local system tools for environment auditing. Thepreflight.pyscript also executes hardcoded diagnostic probes within Kubernetes pods viakubectl execto verify API connectivity and GPU library availability.\n- [PRIVILEGE_ESCALATION]: The orchestration process includessudocommands and privileged Kubernetes Jobs to configure host runtimes and install services. These operations are clearly documented as mutations that require user oversight and approval.\n- [CREDENTIALS_UNSAFE]: The skill manages sensitive environment variables and configuration files (such asKUBECONFIGandsecrets.env). It implements safety measures to ensure that credential values are not printed, logged, or exfiltrated, focusing instead on verifying their presence and accessibility.
Audit Metadata