doca-container-deployment
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for running standard system diagnostic commands (e.g.,
ls,pkg-config,doca_caps, andkubeletstatus) to verify environment health and deployment status. These commands are necessary for the skill's primary purpose of BlueField DPU management. - [EXTERNAL_DOWNLOADS]: The skill refers to official NVIDIA resources, such as the NGC container registry (
nvcr.io) and official documentation sites (docs.nvidia.com). These are trusted vendor sources used for obtaining service images and authoritative configuration recipes. - [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface as it is designed to analyze external data like container logs and pod statuses. The skill provides remediation by instructing the agent to rely on official NVIDIA guides as the source of truth for all configuration and status interpretation, minimizing the risk of following instructions embedded in log data.
- [NO_CODE]: The skill consists entirely of instructional markdown and configuration files without including executable scripts or binaries, which significantly reduces the local execution risk surface.
Audit Metadata