foundationpose-setup

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the NGC CLI tool from the official vendor domain (api.ngc.nvidia.com) to manage model and weight downloads.
  • [REMOTE_CODE_EXECUTION]: Clones and installs source code from trusted organizations on GitHub, specifically the nvidia-isaac and facebookresearch repositories.
  • [COMMAND_EXECUTION]: Performs environment verification and builds machine-specific engines using standard system tools such as nvidia-smi, ldd, uv, and docker.
  • [CREDENTIALS_UNSAFE]: References gated access to Hugging Face models but directs users to official authentication workflows (hf auth login) and explicitly warns against printing secrets or tokens in logs.
  • [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalations were detected; all network and file operations are consistent with the skill's stated purpose of software installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:27 PM
Security Audit — agent-trust-hub — foundationpose-setup