codonfm-setup
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads model weights and configuration files from official Hugging Face repositories (
nvidia/NV-CodonFM-Encodon-*). These are well-known, public resources from a trusted organization. - [COMMAND_EXECUTION]: The skill uses standard shell commands for environment setup, including
docker,python3.11 -m venv, andpip install. These are used for their intended purpose of configuring a development environment. - [DYNAMIC_EXECUTION]: The skill uses
python -cto perform brief runtime checks (e.g.,torch.cuda.is_available()). These checks are static, diagnostic in nature, and do not incorporate untrusted external input. - [PRIVILEGE_ESCALATION]: While the skill mentions Docker (which often requires specific permissions), it does not attempt to use
sudoor modify system-level configurations beyond standard container/venv setup.
Audit Metadata