cupynumeric-install
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions explicitly prohibit the agent from executing installation commands (pip install, conda install, etc.) directly, requiring them to be presented to the user for manual execution.
- [SAFE]: Instructions mandate the use of isolated environments (conda envs or python venvs), preventing modifications to the base system or global environments.
- [EXTERNAL_DOWNLOADS]: The skill references a bootstrap script for Miniforge from a well-known GitHub repository. The instructions explicitly state the agent must not execute the command directly due to the security implications of the curl-pipe-bash pattern.
- [COMMAND_EXECUTION]: Verification steps involve creating temporary Python scripts in /tmp and executing them via the legate launcher. These are standard smoke tests for verifying the installation.
- [SAFE]: All metadata and external links point to official NVIDIA documentation or legitimate open-source repositories.
Audit Metadata