cupynumeric-migration-readiness
Fail
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: CRITICAL
Full Analysis
- [SAFE]: The skill follows a strict read-only protocol. Instructions explicitly direct the agent to perform static assessments using inspection tools like
Read,Grep, andGlob, while forbidding the execution of user code, file modifications, or the retrieval of environment variables and secrets. - [SAFE]: The automated scanner alert identifying
numpy.infoas a malicious URL is a false positive. Within the skill's manifest (assets/api-support.md), this string represents a standard NumPy library API function being tracked for cuPyNumeric compatibility, not a destination for network traffic or data exfiltration. - [SAFE]: All external resource references, including the scraper script
scripts/fetch_api_support.py, target official and well-known NVIDIA documentation domains. These resources are used appropriately to synchronize API support data with the vendor's upstream records. - [SAFE]: The skill includes comprehensive documentation on secure coding practices (e.g.,
references/refactor-recipes.md), encouraging users to replace inefficient or risky patterns likempi4pyor inline array mutations with safer, vectorized alternatives.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata