skills/nvidia/skills/doca-upgrade/Gen Agent Trust Hub

doca-upgrade

Warn

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill utilizes sudo for administrative tasks, specifically for recovering interrupted package transactions with sudo dpkg --configure -a and sudo apt-get -f install as seen in SKILL.md and TASKS.md.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for version detection (pkg-config, doca_caps) and package management.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input regarding upgrade requests. Ingestion points: user prompts for version changes or status checks (SKILL.md). Boundary markers: explicit 'STOP and ask' instructions and 'never-auto-upgrade' rules (CAPABILITIES.md). Capability inventory: subprocess calls for sudo, apt-get, and dpkg (TASKS.md). Sanitization: absent, relying on human verification as the primary control gate.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 16, 2026, 05:02 AM