The Agent Skills Directory

[SAFE]: No security issues were detected. The skill is authored by NVIDIA and implements robust security measures for environment setup.
[EXTERNAL_DOWNLOADS]: The skill downloads Python packages and system packages from official, well-known, and trusted sources.
Fetches PyCUDA from PyPI (files.pythonhosted.org) and verifies the download against a hardcoded SHA-256 hash.
Installs system packages from official NVIDIA Jetson repositories (repo.download.nvidia.com) using signature-authenticated APT.
Downloads PyTorch from the official PyTorch wheel registry.
[COMMAND_EXECUTION]: The skill executes system commands for package management and verification using controlled parameters.
Uses apt-get for package installation, restricted to a reviewed plan and authenticated origins.
Employs sudo -n for non-interactive privilege escalation during APT operations, which is appropriate and standard for a setup workflow.
[DYNAMIC_EXECUTION]: Uses standard importlib introspection to verify the presence of the PyNvVideoCodec module and packaging utilities. These techniques are used here to validate the environment, not to execute untrusted code.
[INDIRECT_PROMPT_INJECTION]: The skill has a low-risk attack surface as it processes system release files and APT configuration data rather than arbitrary user content. It uses strict JSON schemas and cryptographic verification at each stage to maintain data integrity.

jetson-video-setup