nel-assistant
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
nelCLI tool to build configurations, list tasks, check status, and run evaluations (nel skills build-config,nel run,nel status). It also providessshcommand templates for users to manually inspect logs on remote SLURM clusters.\n- [EXTERNAL_DOWNLOADS]: The skill is designed to download model-specific scripts (such as reasoning parsers) from HuggingFace usingcurlas part of thepre_cmdconfiguration for model deployment.\n- [REMOTE_CODE_EXECUTION]: The assistant generates and instructs the execution of shell scripts via thepre_cmdandpost_cmdfields in the NEL configuration. It correctly advises the user to set theNEMO_EVALUATOR_TRUST_PRE_CMDenvironment variable to enable this functionality safely within the tool's framework.\n- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection (Category 8) because it ingests data from external model cards to populate configuration fields that influence execution logic.\n - Ingestion points: External model cards retrieved via
WebSearchfrom HuggingFace or NVIDIA repositories inSKILL.md(Step 3).\n - Boundary markers: Absent; the instructions do not specify the use of delimiters or warnings when processing the external model card text.\n
- Capability inventory: The skill possesses the ability to execute CLI commands and generate scripts that are later executed during the
nel runprocess.\n - Sanitization: Absent; the instructions prompt the agent to extract and apply all relevant configurations directly from the found model card text without specific validation steps.
Audit Metadata