doca-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent/user to pull and run the NGC DOCA container (nvcr.io/nvidia/doca/doca) and to consult the NGC catalog (https://catalog.ngc.nvidia.com/orgs/nvidia/teams/doca/containers/doca/tags) and NGC signup page (https://ngc.nvidia.com) as part of the live "no-install" / Stage‑1 workflow, which are runtime fetches that download and execute remote code (container images) and are required dependencies for that path.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs and routes to workflows that prepare or change low-level system runtime state (hugepages, devlink/representors, kernel-module prerequisites, eswitch mode, mlxconfig), which are privileged operations that modify the host and can compromise machine state if performed by the agent.