nemo-data-designer-plugin
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the
nemoCLI to manage synthetic data generation. This includes validating configurations, running previews, and creating datasets locally or on a cluster. These operations are the primary purpose of the skill. - [COMMAND_EXECUTION]: The troubleshooting section includes instructions for the agent to ask the user for permission to retry commands with the sandbox disabled if network errors occur. This request for reduced security is properly gated by explicit user consent.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading persona datasets via the
nemo data-designer personas downloadcommand and may suggest installing thenemopackage if it is missing from the environment. These resources originate from the vendor's official toolchain. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes user-provided descriptions and potentially untrusted seed data to generate and execute Python scripts.
- Ingestion points: User input via
$ARGUMENTSinSKILL.mdand seed files described inreferences/seed-datasets.md. - Boundary markers: Explicit delimiters for the user-provided descriptions are absent in the prompt templates.
- Capability inventory: The skill executes the generated Python code through the
nemo data-designerutility andpythonsubprocesses. - Sanitization: No explicit sanitization of the input data is performed before interpolation into the generation logic, although the skill includes a validation step (
nemo data-designer validate).
Audit Metadata