cuml
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official NVIDIA documentation and configuration files hosted on GitHub (e.g.,
https://raw.githubusercontent.com/NVIDIA/cuml/...). It also provides instructions for installing official vendor packages (cuml-cu13,cuml-cu12) from PyPI. These resources are from a well-known service and a trusted organization, representing standard development operations. - [COMMAND_EXECUTION]: The skill includes a specialized utility script,
scripts/check_removed_apis.py, which is intended to be run by the agent to audit user code. Analysis of this script confirms it uses Python'sast(Abstract Syntax Trees) module to perform static analysis. This allows the tool to identify deprecated function calls and arguments without executing the target code, posing no runtime execution risk to the environment. - [DATA_EXPOSURE]: There are no patterns suggesting the access or exfiltration of sensitive environment data, such as credentials, SSH keys, or cloud configuration files. The network activity is limited to fetching public documentation and installing packages from official registries.
Audit Metadata