cdf-orchestration-preflight

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill guides the installation of essential tools and infrastructure components (Docker, Kubernetes, NVIDIA Container Toolkit, Helm, uv, AWS CLI, and Calico CNI) from official, trusted, and well-known project websites.\n- [COMMAND_EXECUTION]: Diagnostic scripts (preflight.py and storage_check.py) use subprocess.run to interact with local system tools for environment auditing. The preflight.py script also executes hardcoded diagnostic probes within Kubernetes pods via kubectl exec to verify API connectivity and GPU library availability.\n- [PRIVILEGE_ESCALATION]: The orchestration process includes sudo commands and privileged Kubernetes Jobs to configure host runtimes and install services. These operations are clearly documented as mutations that require user oversight and approval.\n- [CREDENTIALS_UNSAFE]: The skill manages sensitive environment variables and configuration files (such as KUBECONFIG and secrets.env). It implements safety measures to ensure that credential values are not printed, logged, or exfiltrated, focusing instead on verifying their presence and accessibility.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 03:53 PM