doca-bf3-deployment
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional, guiding users through the BlueField-3 deployment process using standard NVIDIA tools such as
bfb-install,mlxconfig, andflint. - [SAFE]: It implements a robust safety framework by deferring all mutating hardware operations (firmware burns, mode changes, BFB reflashing) to an external skill (
doca-hardware-safety) that manages preflight checks and rollback procedures. - [SAFE]: All external references for software and documentation target official NVIDIA domains (e.g., docs.nvidia.com) and GitHub repositories, which are trusted vendor sources. It correctly instructs users to verify the integrity of downloaded BlueField bundle (BFB) images using SHA checksums.
- [SAFE]: The skill identifies potential risks, such as local loopback address confusion during network testing (TMFIFO) and home directory ownership issues on certain OS images, providing documented and standard Linux remediation steps.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from device console buffers (
/dev/rshim<N>/console) and system command outputs (cat /etc/mlnx-release). While this is an ingestion surface, the risk is minimized by the skill's instructions to look for specific readiness markers and error verbs rather than executing data as commands. The severity is low as it follows standard monitoring patterns for hardware bring-up.
Audit Metadata