doca-verbs
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard system commands for environment discovery and project configuration, such as
pkg-config,ls,doca_caps, andibv_devinfo. These are necessary for verifying the local DOCA SDK installation and device state. - [PRIVILEGE_ESCALATION]: The skill mentions the use of
sudoforibv_devinfoanddmesg | tailto access low-level RDMA device information and kernel logs. These are documented diagnostic steps for hardware-level troubleshooting and do not involve arbitrary command execution or persistence. - [DATA_EXPOSURE]: Technical information about the local SDK version and device capabilities is accessed via standard CLI tools for the purpose of developer guidance. No patterns of data exfiltration to external or untrusted domains were detected.
- [REMOTE_CODE_EXECUTION]: No remote script execution or package installation from unknown sources was found. All external references point to official NVIDIA documentation, sample repositories, and developer forums.
Audit Metadata