doca-flow-grpc-server
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to help users with standard administrative and development commands including
pkg-config,meson,find, andprotoc. These are used for environment verification, building the server from the user's local source tree, and generating language-specific client stubs. These operations are appropriate for the tool's stated purpose of managing a DOCA Flow control plane. - [EXTERNAL_DOWNLOADS]: The documentation refers to well-known and trusted external resources for gRPC documentation (
grpc.io) and official NVIDIA DOCA documentation (nvidia.com). It does not instruct the agent to download or execute arbitrary scripts from untrusted sources. - [SAFE]: The skill demonstrates a high level of security awareness by explicitly warning that the
doca_flow_grpcbinary uses insecure credentials by default. It provides clear mitigation strategies, such as using external proxies for TLS termination and restricting binding to trusted network segments. It also enforces a 'smoke-before-bulk' testing policy to ensure configuration correctness before broad deployment.
Audit Metadata