cuequivariance-jax
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads Python packages
cuequivariance,cuequivariance-jax,jax, andflax. These are well-known machine learning libraries. Specifically,cuequivarianceandcuequivariance-jaxare vendor-owned resources (NVIDIA), andjaxandflaxare from trusted organizations (Google/DeepMind). These downloads are necessary for the skill's purpose and are documented neutrally. - [COMMAND_EXECUTION]: The skill provides shell commands for setting up a Python virtual environment (
python3 -m venv), installing packages viapip, and executing scripts. These operations are performed within isolated temporary directories created bymktemp, minimizing the risk to the host environment. - [SAFE]: The skill demonstrates standard cryptographic best practices by requiring TLS verification for downloads (
--cert "${PIP_CERT:-/etc/ssl/certs/ca-certificates.crt}") and advising users to retain TLS verification.
Audit Metadata