doca-gpunetio
Warn
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to execute commands requiring elevated privileges. Specifically,
sudo modprobe nvidia_peermemis used to load the kernel module required for GPUDirect RDMA functionality, andsudo dmesgis suggested for debugging driver-level issues. While these are standard administrative tasks for DOCA and CUDA environment setup, they involve the use ofsudofor system-level modifications. - [COMMAND_EXECUTION]: The skill utilizes several system commands for environment discovery and validation. These include
nvidia-smifor querying GPU status,nvccfor compiler version checks, andpkg-configfor library configuration and versioning. These tools are used locally within the developer's environment to ensure hardware and software compatibility. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data provided by the user, such as CUDA source code (
.cufiles), build manifests (meson.build,CMakeLists.txt), and runtime logs (dmesgoutput). - Ingestion points: User-supplied source code, build configuration files, and system/application logs processed during the
configure,modify, anddebugtasks. - Boundary markers: Absent. The instructions do not specify the use of delimiters or safety warnings to ignore instructions embedded within the data being analyzed.
- Capability inventory: The skill uses subprocess calls to
nvidia-smi,nvcc,pkg-config, andmodprobe, and performs file-system read operations to locate samples and version information. - Sanitization: Absent. There is no mention of sanitizing, escaping, or validating the external content before it is interpolated into the agent's context.
Audit Metadata