doca-common
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional Markdown and metadata. No executable scripts (.sh, .py, .js) are included in the package.
- [EXTERNAL_DOWNLOADS]: The skill references official NVIDIA resources including container images on 'nvcr.io' and documentation on 'nvidia.com'. These are verified vendor resources and do not pose a security risk.
- [COMMAND_EXECUTION]: The instructions recommend standard system diagnostic commands (e.g.,
pkg-config,ls,cat,grep) to verify the local DOCA installation. These operations are read-only and limited to identifying library versions and header locations. - [OBFUSCATION]: A digital signature file (
skill.oms.sig) is present. This is a standard cryptographic artifact (sigstore bundle) used for provenance verification and does not contain malicious obfuscated code.
Audit Metadata