msa-search-nim
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with official NVIDIA endpoints, including
health.api.nvidia.comfor inference andapi.ngc.nvidia.comfor database downloads, which is appropriate for a vendor-authored skill. - [COMMAND_EXECUTION]: Shell commands provided for local deployment are legitimate, focusing on container orchestration with Docker and parallel database retrieval using standard tools like
aria2c. - [CREDENTIALS_SAFE]: The skill implements best practices for secret management, instructing users to provide
NGC_API_KEYthrough environment variables or local.envfiles, avoiding hardcoded credentials. - [FILE_SYSTEM_SECURITY]: The included
scripts/hosted_search.pyutility demonstrates high security maturity by enforcing strict POSIX file permissions (0600) and directory permissions (0700), and using temporary staging areas to ensure atomic and private writes. - [DATA_VALIDATION]: The Python client performs strict validation of input protein sequences against the standard amino acid alphabet, effectively mitigating potential injection attacks at the application layer.
Audit Metadata