skills/nvidia/skills/doca-setup/Gen Agent Trust Hub

doca-setup

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of official DOCA container images from the NVIDIA Container Registry (nvcr.io/nvidia/doca/doca). These are vendor-owned resources used for the 'Stage 1 — container learning' workflow. The instructions include deterministic rules for selecting specific, non-floating tags from the official NGC catalog to mitigate supply chain risks like image replacement.
  • [COMMAND_EXECUTION]: The skill utilizes a series of standard diagnostic shell commands to verify the environment, including lspci for hardware presence, devlink for driver state, pkg-config for build-time dependencies, and mlxconfig for firmware queries. These are intended for read-only environment verification.
  • [SAFE]: The skill implements several security best practices, including a 'Universal verification contract' (5-step verification for changes), a strict 'Safety policy' for global system state (hugepages, reboots), and secure handling of external credentials (advising users to use environment variables and stdin for the NGC API key to avoid leaking it in command history).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 05:02 AM