doca-socket-relay
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's instructions and scripts are consistent with its stated purpose of managing the NVIDIA DOCA Socket Relay artifact. No malicious intent or hidden behaviors were detected.
- [COMMAND_EXECUTION]: The skill describes the use of host-level commands including
doca_socket_relayandpkg-config. These are standard tools for the NVIDIA DOCA environment and their usage follows a defined safety policy including a 'read-only first' approach. - [INDIRECT_PROMPT_INJECTION]: As a data-path bridge that carries traffic from host applications to DPU peers, the skill manages a surface that could ingest untrusted data. However, it incorporates a mandatory 'smoke-before-bulk' verification loop and a layered error taxonomy to mitigate operational risks (Severity: LOW).
- [PRIVILEGE_ESCALATION]: The documentation notes that certain deployment shapes (e.g., binding to specific socket paths or running on the BlueField Arm side) may require elevated privileges (
sudo). This is documented as a legitimate requirement for interacting with hardware representors and system sockets.
Audit Metadata