doca-setup
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of official DOCA container images from the NVIDIA Container Registry (
nvcr.io/nvidia/doca/doca). These are vendor-owned resources used for the 'Stage 1 — container learning' workflow. The instructions include deterministic rules for selecting specific, non-floating tags from the official NGC catalog to mitigate supply chain risks like image replacement. - [COMMAND_EXECUTION]: The skill utilizes a series of standard diagnostic shell commands to verify the environment, including
lspcifor hardware presence,devlinkfor driver state,pkg-configfor build-time dependencies, andmlxconfigfor firmware queries. These are intended for read-only environment verification. - [SAFE]: The skill implements several security best practices, including a 'Universal verification contract' (5-step verification for changes), a strict 'Safety policy' for global system state (hugepages, reboots), and secure handling of external credentials (advising users to use environment variables and stdin for the NGC API key to avoid leaking it in command history).
Audit Metadata