skills/nvidia/skills/codonfm-setup/Gen Agent Trust Hub

codonfm-setup

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads model weights and configuration files from official Hugging Face repositories (nvidia/NV-CodonFM-Encodon-*). These are well-known, public resources from a trusted organization.
  • [COMMAND_EXECUTION]: The skill uses standard shell commands for environment setup, including docker, python3.11 -m venv, and pip install. These are used for their intended purpose of configuring a development environment.
  • [DYNAMIC_EXECUTION]: The skill uses python -c to perform brief runtime checks (e.g., torch.cuda.is_available()). These checks are static, diagnostic in nature, and do not incorporate untrusted external input.
  • [PRIVILEGE_ESCALATION]: While the skill mentions Docker (which often requires specific permissions), it does not attempt to use sudo or modify system-level configurations beyond standard container/venv setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 03:53 PM