doca-flow-grpc-server
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for the
doca_flow_grpctool. It provides structured workflows for configuration, deployment, and troubleshooting while maintaining a strong emphasis on security posture and hardware safety policies. - [PROMPT_INJECTION]: No malicious prompt injection patterns were found. The use of 'CRITICAL' in the text refers to important security warnings regarding plaintext transport, which is appropriate for the technical context.
- [DATA_EXPOSURE_&_EXFILTRATION]: No evidence of hardcoded credentials or unauthorized data access was detected. The skill correctly identifies that the server uses insecure credentials by default and instructs users to implement external security layers.
- [OBFUSCATION]: No malicious obfuscation was detected. The
skill.oms.sigfile contains standard Base64-encoded in-toto attestations and X.509 certificates used for artifact signing, which are legitimate security features. - [UNVERIFIABLE_DEPENDENCIES_&_REMOTE_CODE_EXECUTION]: The skill references standard development tools (
meson,ninja,pkg-config,protoc) and trusted external documentation (NVIDIA, gRPC.io). It does not perform any unauthorized remote code execution. - [INDIRECT_PROMPT_INJECTION]: The skill defines a clear attack surface involving the programming of network flows, but it includes appropriate safety boundary markers and instructions for smoke testing and manual verification to mitigate risks.
Audit Metadata